Zulip
v1.0.2Zulip integration. Manage data, records, and automate workflows. Use when the user wants to interact with Zulip data.
⭐ 0· 98·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Zulip integration) match the runtime instructions which show how to use the Membrane CLI to connect to Zulip, list actions, run actions, and proxy raw API requests. Required network access and a Membrane account are proportionate to the stated purpose.
Instruction Scope
SKILL.md only instructs the agent/operator to install and run the Membrane CLI, create/connect a Zulip connection, list and run actions, and proxy API requests through Membrane. It does not instruct reading unrelated files, enumerating system credentials, or exfiltrating data outside the Membrane/Zulip flow.
Install Mechanism
The skill is instruction-only (no install spec), but SKILL.md recommends `npm install -g @membranehq/cli`. Using the npm package is reasonable for this integration, but global npm installs modify the system environment and carry typical supply-chain risk; consider using `npx` or a local install and verify the package/owner before installing.
Credentials
No environment variables, config paths, or local credentials are requested. Authentication is delegated to Membrane (browser-based login/connection flow), which is consistent with the stated guidance to avoid local API keys.
Persistence & Privilege
The skill does not request always-on presence, system-wide config changes, or access to other skills' credentials. Default autonomy (agent invocation allowed) is present but not combined with other elevated privileges.
Assessment
This skill is coherent: it uses the Membrane CLI to talk to Zulip and does not ask for unrelated secrets. Before using it, verify you trust Membrane (review their privacy/docs and the @membranehq CLI package on npm/GitHub), prefer `npx @membranehq/cli` or a local install to avoid a global npm install, and be aware that API traffic and authentication are proxied through Membrane (so Zulip data will transit/store on Membrane's service per their policies). If you're subject to organizational data controls, confirm that routing your Zulip data through a third-party proxy is acceptable.Like a lobster shell, security has layers — review code before you run it.
latestvk976zyqdazq7fx23b2skqjbdw18427ja
License
MIT-0
Free to use, modify, and redistribute. No attribution required.