ClawHub

Clear Books

v1.0.0

Clear Books integration. Manage data, records, and automate workflows. Use when the user wants to interact with Clear Books data.

⭐ 0· 29·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name and description claim a Clear Books integration and all runtime instructions use the Membrane CLI to discover/connect/run Clear Books actions or proxy API requests; there are no unrelated environment variables, binaries, or config paths requested.
✓
Instruction Scope
SKILL.md stays on-topic: it instructs installing/using the Membrane CLI, logging in, creating connections, listing actions, running actions, and proxying requests to Clear Books. It does not instruct reading arbitrary files or requesting unrelated credentials. Note: examples include global npm install and npx usage which will run code from npm.
ℹ
Install Mechanism
There is no registry install spec, but the doc tells operators to install @membranehq/cli from the public npm registry (npm install -g or npx @membranehq/cli@latest). This is a common approach but is moderate risk compared with a vetted distribution — installing global npm packages can execute arbitrary code and 'latest' is mutable. Recommend verifying the package publisher/repo and using least-privilege install options.
✓
Credentials
The skill declares no required env vars or credentials and explicitly instructs not to ask users for Clear Books API keys, instead delegating auth to Membrane. That is proportionate, but it does place trust in Membrane's service to store and handle the user's Clear Books credentials.
✓
Persistence & Privilege
Instruction-only skill with no install manifest and always:false. It does not request system-wide persistence or modify other skills. Normal autonomous invocation is allowed by platform defaults and is not a concern here by itself.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to connect to Clear Books. Before installing or using it: - Verify the @membranehq/cli npm package and its GitHub repo (publisher, recent commits, and package integrity) before running a global install. Prefer using npx or a scoped/local install on shared systems. - Understand that Membrane will hold and manage your Clear Books credentials server-side — ensure you trust the Membrane service and review their privacy/security docs. - Be cautious running 'npx ...@latest' examples, as 'latest' can change over time; pin versions if you need reproducibility. - Avoid installing global developer tools on production or sensitive machines; use isolated environments (container or dedicated VM) if possible. - If you need higher assurance, review Membrane's source code or ask the skill author for a signed package/release artifacts.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f4wkcb2y8cjeshs1ybv7s85847rr6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments