Charthop
v1.0.2ChartHop integration. Manage data, records, and automate workflows. Use when the user wants to interact with ChartHop data.
⭐ 0· 80·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (ChartHop integration) match the runtime instructions: discover ChartHop connectors, run actions, and proxy requests via the Membrane CLI. Nothing requested (no env vars, no config paths) is unrelated to that purpose.
Instruction Scope
SKILL.md only instructs installing and using the Membrane CLI, creating connections, listing actions, running actions, and proxying requests to ChartHop. It does not instruct reading arbitrary files, grabbing unrelated credentials, or exfiltrating data to unexpected endpoints.
Install Mechanism
There is no built-in installer in the skill (instruction-only). It recommends installing @membranehq/cli via npm -g, which is a reasonable, standard mechanism but has moderate risk because it will install a global binary from npm; users should verify the package maintainer/source before installing.
Credentials
The skill declares no required environment variables or credentials and explicitly advises against asking users for API keys, relying on Membrane to manage auth. This is proportionate to the described functionality.
Persistence & Privilege
The skill is not always-enabled and does not request elevated or persistent platform privileges. It does not instruct modifying other skills or system-wide agent settings.
Assessment
This skill is instruction-only and coherent: it tells you to use the Membrane CLI to access ChartHop and does not ask for unrelated secrets. Before installing or running commands: (1) verify the @membranehq/cli package and its publisher on npm and the referenced GitHub repo; (2) be aware npm -g writes a global binary and may require elevated privileges on your machine; (3) the login flow opens a browser (or uses a headless URL+code), so ensure you're comfortable completing auth in your environment; (4) confirm network access and that you trust Membrane to proxy ChartHop requests, since Membrane will handle credentials server-side. If you prefer, review the CLI source code or run it in a sandboxed/isolated environment first.Like a lobster shell, security has layers — review code before you run it.
latestvk9779kew9wefrxxy460zaa9sqd843spr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.