Bundleiq
v1.0.0BundleIQ integration. Manage data, records, and automate workflows. Use when the user wants to interact with BundleIQ data.
⭐ 0· 45·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill describes a BundleIQ integration and its SKILL.md only documents using the Membrane CLI to discover connectors, create connections, run actions, and proxy API requests to BundleIQ. The requested capabilities (network access, installing a CLI) align with the described purpose.
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, performing browser-based authentication, listing/creating connections, running actions, and proxying requests to BundleIQ endpoints. The instructions do not ask the agent to read unrelated local files or request unrelated credentials. They do permit arbitrary proxied API calls to BundleIQ via Membrane, which is expected for this integration.
Install Mechanism
There is no built-in install spec; the README recommends installing an npm package globally (npm install -g @membranehq/cli) or using npx. Installing an npm CLI is a common, reasonable choice but carries the usual risk of executing third-party code from the npm registry. The package comes from a named vendor (Membrane) and not from an arbitrary URL, which is lower risk than a raw download but still worth validating.
Credentials
The skill declares no required environment variables or credentials and instructs users to rely on Membrane-managed connections (browser-based auth). This is proportionate to the stated purpose. Note: Membrane handles credentials server-side and the created connection will grant the CLI access to the user's BundleIQ data, which is expected for this integration.
Persistence & Privilege
The skill is user-invocable, not always-enabled, and does not request elevated platform privileges or persistent presence. Autonomous invocation is allowed by default but not unusual; no additional persistence or cross-skill configuration is requested.
Assessment
This skill is coherent for integrating with BundleIQ, but before installing: (1) confirm you trust the Membrane project/provider (review the @membranehq/cli package source and publisher), (2) prefer using npx or scoped installs if you want to avoid a global npm install, (3) understand that creating a Membrane connection grants the CLI/Membrane access to your BundleIQ data (so scope the connection appropriately), and (4) in sensitive environments, consider running the CLI in a sandboxed or minimal-permission environment. If you need more assurance, ask for the package repository/commit referenced by the skill and verify the package contents prior to installation.Like a lobster shell, security has layers — review code before you run it.
latestvk971jmng79k5f02r0jq4nsb2qn84ct2b
License
MIT-0
Free to use, modify, and redistribute. No attribution required.