Commbox
v1.0.0CommBox integration. Manage data, records, and automate workflows. Use when the user wants to interact with CommBox data.
⭐ 0· 53·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill declares a CommBox integration and all runtime instructions use the Membrane CLI to discover connectors, create connections, run actions, or proxy requests to the CommBox API. No unrelated credentials, binaries, or paths are requested.
Instruction Scope
SKILL.md only instructs installing and using the @membranehq CLI, performing browser-based login flows, listing/connecting actions, running actions, and proxying requests to CommBox via Membrane. It does not direct reading unrelated files, other env vars, or transmitting data to unexpected endpoints beyond Membrane/CommBox.
Install Mechanism
There is no formal install spec in the registry metadata, but the instructions ask the user to run `npm install -g @membranehq/cli` (or use npx). Installing a global npm package from the public registry is a common pattern for CLIs but carries normal supply-chain risk; verify the package's provenance before installing.
Credentials
The skill requests no environment variables or secrets. It explicitly recommends using Membrane-managed connections (so no local API keys). Network access and a Membrane account are required, which is reasonable for this integration.
Persistence & Privilege
The skill has no install-time code, does not request persistent agent privileges, and is not marked 'always'. It relies on user-run CLI actions and browser auth flows; there is no indication it modifies other skills or system-wide settings.
Assessment
This skill appears coherent: it tells the agent to use the official Membrane CLI to talk to CommBox. Before using it, confirm you trust the Membrane service and the @membranehq npm package (check the package and its GitHub repo), and consider using a test account or least-privilege connection while you validate behavior. Be aware the Membrane connection will have access to your CommBox data once you authorize it, and installing global npm packages alters your environment — inspect the package metadata and releases before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk97edgb7f9rhd3za1echfn59bd8495v1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.