Automox
v1.0.0Automox integration. Manage data, records, and automate workflows. Use when the user wants to interact with Automox data.
⭐ 0· 30·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description claim Automox integration and every runtime instruction references using the Membrane CLI to connect to Automox, discover actions, run actions, and proxy API requests. Requiring a Membrane account and network access is proportional to that purpose.
Instruction Scope
SKILL.md limits runtime actions to installing and using the Membrane CLI, creating/listing connections, discovering actions, running actions, and proxying requests to the Automox API. It does not instruct reading unrelated files or environment variables, nor does it push data to unexpected endpoints beyond the Membrane/Automox flow.
Install Mechanism
There is no registry install spec, but the SKILL.md instructs installing the @membranehq/cli via npm (global). Installing a third-party npm CLI is a reasonable dependency for this integration, but global npm installs carry standard supply-chain risks — verify the package and registry (npmjs) before installing.
Credentials
The skill declares no required env vars or credentials. It explicitly relies on Membrane to manage authentication rather than asking the user for Automox API keys, which is proportionate and appropriate for the described flow. It does require a Membrane account and browser-based auth (or headless completion flow).
Persistence & Privilege
The skill is not always-enabled and does not request modifying other skills or system-wide agent configuration. It only instructs the agent operator to log in via Membrane (which will persist connection credentials within Membrane), which is expected for this use case.
Scan Findings in Context
[no_regex_findings] expected: The static scanner found no regex matches. This skill is instruction-only (SKILL.md) with no code files for the scanner to analyze, so absence of findings is expected but not proof of safety.
Assessment
This skill appears coherent: it uses the Membrane CLI to talk to Automox and does not request unrelated secrets. Before installing or running: (1) confirm you trust the Membrane project (@membranehq/cli) and its npm package source; (2) be aware you will need a Membrane account and will authenticate in a browser (or use the headless flow); (3) review Membrane's privacy/security docs because credentials and API calls will be proxied through their service. If you cannot or do not want to install global npm packages, you can run the CLI via npx as suggested in the SKILL.md instead.Like a lobster shell, security has layers — review code before you run it.
latestvk970vxy323z1pyx1avab43pvz9846hkr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.