Zerossl
v1.0.2ZeroSSL integration. Manage data, records, and automate workflows. Use when the user wants to interact with ZeroSSL data.
⭐ 0· 96·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's stated purpose (ZeroSSL integration) matches the runtime instructions which use the Membrane CLI to access ZeroSSL. One minor incoherence: the registry metadata declares no required binaries, but SKILL.md explicitly instructs installing the @membranehq/cli binary via npm.
Instruction Scope
SKILL.md stays within scope: it instructs the agent/operator to install and use Membrane CLI, create a connector, list/run actions, and use Membrane's request proxy. It does not ask the agent to read unrelated files or environment variables. Note: all API calls are proxied through Membrane, so ZeroSSL data and credentials will transit Membrane's service.
Install Mechanism
There is no formal install spec in the registry, but the instructions require installing the Membrane CLI via npm (global install or npx). Installing npm packages (especially global installs or npx on-demand fetches) executes third-party code and should be considered by the user. The install source (npm/@membranehq) is a normal package registry; no unusual download URLs are used.
Credentials
The skill declares no environment variables or credentials and instructs using Membrane's connector flow instead of local API keys. That is proportionate. Users should be aware that connector authentication is handled by Membrane and credentials are managed server-side (i.e., they are stored/used by Membrane).
Persistence & Privilege
The skill does not request always:true or any elevated persistence; it is user-invocable and allows autonomous invocation by default (platform normal). It does not request modification of other skills or system-wide settings.
Assessment
This skill is an instruction-only wrapper that expects you to install and use the Membrane CLI to access ZeroSSL. Before installing/use: (1) confirm you trust Membrane because API calls and authentication are proxied through their service (check their privacy/security docs); (2) be aware npm global install or npx will execute code from the npm registry—prefer using npx to avoid a persistent global install or review the package source first; (3) note the minor metadata mismatch (registry lists no required binaries while SKILL.md requires the Membrane CLI); and (4) avoid entering or sharing raw ZeroSSL API keys with the skill (it recommends connector-based auth). If you need higher assurance, ask for a version that declares its required binaries in metadata or performs actions with direct, auditable API calls.Like a lobster shell, security has layers — review code before you run it.
latestvk97fdwgb78wxnw0t74naev4eqn84315m
License
MIT-0
Free to use, modify, and redistribute. No attribution required.