Botanalytics
v1.0.0Botanalytics integration. Manage data, records, and automate workflows. Use when the user wants to interact with Botanalytics data.
⭐ 0· 84·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Botanalytics integration) matches the runtime instructions: install/use the Membrane CLI to connect to Botanalytics, list actions, run proxy requests, and manage metrics. No unrelated credentials, binaries, or resources are requested.
Instruction Scope
SKILL.md explicitly confines actions to installing and using @membranehq/cli, creating connections, listing and running actions, and proxying API calls via Membrane. It does not instruct the agent to read unrelated files, ask for local secrets, or send data to unknown endpoints. Browser-based login and headless login flows are described.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but the README recommends installing the Membrane CLI via `npm install -g @membranehq/cli`. Installing a third-party npm package is expected for this integration but carries standard supply-chain risk; the skill itself does not automatically fetch code.
Credentials
The skill declares no required environment variables or secrets and explicitly advises against asking users for API keys. It uses Membrane to handle auth, which is proportionate to the integration's needs.
Persistence & Privilege
The skill does not request persistent/always-on presence and does not attempt to modify other skills or system-level settings. Default autonomous invocation is allowed by platform policy (no evidence this skill misuses it).
Assessment
This skill appears coherent and consistent with its purpose, but check a few practical things before installing/using it: verify the npm package name (@membranehq/cli) and publisher on the npm registry, confirm the homepage/documentation (getmembrane.com and the linked repo) are legitimate, and be comfortable with performing a browser-based login that grants Membrane access to your Botanalytics account. Installing a global npm CLI requires appropriate permissions and carries the usual supply-chain risk—only install packages from maintainers you trust. The skill explicitly warns not to ask for API keys (good); if the agent starts requesting secrets or asking you to paste tokens outside the Membrane flow, refuse and double-check the origin.Like a lobster shell, security has layers — review code before you run it.
latestvk977axjd6d3jpbmff46254z8hh84hj7w
License
MIT-0
Free to use, modify, and redistribute. No attribution required.