Writer
v1.0.2Writer integration. Manage data, records, and automate workflows. Use when the user wants to interact with Writer data.
⭐ 0· 41·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The SKILL.md consistently describes a Writer integration implemented via the Membrane CLI and Membrane proxy. One minor mismatch: the registry metadata lists no required binaries, but the runtime instructions explicitly require the Membrane CLI (npm package or npx). This is a documentation/metadata omission rather than a functional mismatch with purpose.
Instruction Scope
Instructions stay within the stated purpose: install/run the Membrane CLI, create a connection to Writer, list/run actions, or proxy API calls via Membrane. The skill explicitly avoids asking the user for API keys and delegates auth to Membrane. It does instruct browser-based login or headless completion codes, which is appropriate for OAuth-like flows.
Install Mechanism
No automated install spec is embedded in the registry (instruction-only). The SKILL.md suggests installing a public npm package (@membranehq/cli) or using npx. Installing a third-party CLI via npm is a common pattern but carries the usual supply-chain considerations (verify package origin and version).
Credentials
The skill requests no environment variables or credentials in the registry and the instructions explicitly advise not to ask users for API keys. Auth is handled by Membrane (server-side). There are no unexplained or excessive credential requests.
Persistence & Privilege
The skill does not request always:true or system-wide changes. It's user-invocable and allows autonomous invocation (platform default). There is no indication it modifies other skills or global agent settings.
Assessment
This skill appears to be what it says: a Writer integration that uses the Membrane CLI. Before installing or following the instructions, verify the @membranehq/cli package (publisher and version) and the getmembrane.com / membranehq project to ensure you trust that vendor. Be aware that using 'membrane request' will proxy request/response data through Membrane — do not send highly sensitive secrets or private data unless you trust their service and privacy policy. Also note the registry metadata omits the Membrane CLI as a required binary even though the SKILL.md expects it; plan to install or use 'npx' as shown in the instructions.Like a lobster shell, security has layers — review code before you run it.
latestvk9733jxwd019nnh75amvznnr8x843695
License
MIT-0
Free to use, modify, and redistribute. No attribution required.