Chartiq
v1.0.0ChartIQ integration. Manage data, records, and automate workflows. Use when the user wants to interact with ChartIQ data.
⭐ 0· 55·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (ChartIQ integration) match the SKILL.md: it instructs the agent to use the Membrane CLI to create connections, list actions, run actions, and proxy requests to ChartIQ. There are no environment variables, binaries, or config paths declared that are unrelated to that purpose.
Instruction Scope
The runtime instructions stay on-topic: installing the Membrane CLI, logging in (browser-based or headless flow), creating a connection, discovering and running actions, and proxying API requests. The SKILL.md does not direct reading unrelated files or exporting data to unexpected endpoints. It does require interactive authentication in a browser for connection setup, which the user must complete.
Install Mechanism
The skill is instruction-only (no install spec in the registry) but recommends installing @membranehq/cli via npm -g or using npx. Installing a public npm CLI globally is a normal step for a CLI-based integration, but it modifies the host environment and depends on the npm package's integrity — this is a moderate-risk, expected step for this use case.
Credentials
No environment variables, credentials, or config paths are requested by the skill. The instructions explicitly advise against asking users for API keys and recommend using Membrane to manage credentials, which is proportionate to the stated purpose.
Persistence & Privilege
The skill does not request permanent presence (always:false) and does not attempt to modify other skills or system-wide agent settings. Autonomous invocation is allowed by default but is not combined with other concerning privileges.
Assessment
This skill is coherent: it uses the Membrane CLI to talk to ChartIQ and asks you to authenticate via Membrane. Before installing, verify you trust Membrane (the getmembrane.com project and the @membranehq/cli npm package) because Membrane will broker access to your ChartIQ data. Prefer using npx or a local install if you want to avoid a global npm install. Be prepared to complete browser-based authentication for connections. If you need stronger assurance, review the npm package publisher, check Membrane's privacy/security docs, and consider running the CLI in an isolated environment or container.Like a lobster shell, security has layers — review code before you run it.
latestvk973xc0jz8574yc6xyww0yqkyx84dfxe
License
MIT-0
Free to use, modify, and redistribute. No attribution required.