Wisetime
v1.0.2WiseTime integration. Manage data, records, and automate workflows. Use when the user wants to interact with WiseTime data.
⭐ 0· 58·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with WiseTime and all instructions focus on using the Membrane CLI to discover/connect/run WiseTime actions or proxy requests to the WiseTime API. Nothing asked for (no extra env vars, no unrelated binaries) is inconsistent with that purpose.
Instruction Scope
SKILL.md instructs the agent/operator to install and use the Membrane CLI, perform login via browser, create/check connections, list actions, run actions, and optionally proxy raw API requests through Membrane. These steps are narrowly scoped to interacting with WiseTime via Membrane and do not direct reading unrelated files or harvesting secrets from the environment.
Install Mechanism
There is no registry install spec (instruction-only), but the doc recommends installing @membranehq/cli globally via npm (npm install -g). Installing a third-party global npm package is a legitimate and common instruction, but users should verify the package/source and be aware of the usual risks of npm global installs.
Credentials
The skill declares no required env vars or credentials and explicitly instructs operators not to collect API keys (Membrane handles auth). However, all traffic and auth exchange will flow through the Membrane service, so trusting Membrane with the user's WiseTime data and credentials is necessary—this is a privacy/trust consideration rather than an incoherence.
Persistence & Privilege
The skill is instruction-only with always: false and no install-time modifications declared. It does not request persistent system privileges or claim to modify other skills or agent-wide settings.
Assessment
This skill appears coherent: it delegates WiseTime integration to the Membrane CLI and does not ask for unrelated credentials. Before installing or using it, verify @membranehq/cli is the official package (check the npm/GitHub project and publisher), understand that authentication flows open a browser and that requests/data will pass through Membrane's servers (review their privacy/security docs), and prefer running new global CLI installs in a controlled environment. If you need to avoid routing data through a third party, do not use this Membrane-based workflow.Like a lobster shell, security has layers — review code before you run it.
latestvk97be3mdxn1xab204mzcy5t34h843v66
License
MIT-0
Free to use, modify, and redistribute. No attribution required.