Apptweak
v1.0.2AppTweak integration. Manage data, records, and automate workflows. Use when the user wants to interact with AppTweak data.
⭐ 0· 77·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (AppTweak integration) aligns with the instructions: all runtime steps describe using Membrane to connect to AppTweak, discover actions, and run or proxy API calls. The only minor mismatch is that the manifest declares no required binaries while the SKILL.md recommends installing the @membranehq/cli npm package; this is an expected runtime dependency rather than a manifest-declared requirement.
Instruction Scope
SKILL.md stays within scope: it instructs installing and using the Membrane CLI, creating a connection to AppTweak, listing/running Membrane actions, and proxying requests. It does not instruct reading unrelated files, accessing system credentials, or exfiltrating data. It does, however, explicitly routes requests and authentication through Membrane (i.e., external servers), which is core to its design and should be noted by users.
Install Mechanism
There is no install spec in the skill bundle (instruction-only), which is low-risk. The SKILL.md tells the user to run `npm install -g @membranehq/cli`, which is reasonable for this integration but means installing a third-party global npm package from the public registry — users should ensure they trust @membranehq/cli and review its source before installation.
Credentials
The skill declares no env vars or credentials and the instructions explicitly recommend letting Membrane manage credentials (do not ask for API keys). This is proportional: the integration requires a Membrane account and browser-based login, not local secret environment variables.
Persistence & Privilege
Skill flags are default (not always: true, agent-invocable allowed). The skill does not request permanent presence or modify other skills/config. Autonomous invocation is allowed but is the platform default and not problematic by itself.
Assessment
This skill appears coherent: it expects you to use the Membrane CLI to connect to AppTweak and will proxy API calls and credentials through Membrane. Before installing, confirm you trust the Membrane project (@membranehq/cli) and review its source/release, understand that AppTweak data and auth will be handled by Membrane servers (read their privacy/TOS), and be comfortable installing a global npm package. If you prefer direct control, consider using AppTweak's API directly with your own API key instead of routing via a third-party proxy.Like a lobster shell, security has layers — review code before you run it.
latestvk97892v9r6vmxg25q9ves9v87s8429ex
License
MIT-0
Free to use, modify, and redistribute. No attribution required.