Courier
v1.0.2Courier integration. Manage data, records, and automate workflows. Use when the user wants to interact with Courier data.
⭐ 0· 87·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, examples, and runtime instructions all describe interacting with Courier via Membrane. The required pieces (network access, Membrane account, Membrane CLI) are proportionate to that goal.
Instruction Scope
Instructions are limited to installing/using the Membrane CLI, creating connections, listing actions, running actions, and proxying Courier API requests. This stays within the claimed purpose, but the proxy capability allows sending arbitrary HTTP requests through Membrane (expected for an integration but worth noticing). The SKILL.md does not instruct the agent to read local files or environment variables.
Install Mechanism
The SKILL.md recommends installing @membranehq/cli from npm (global install) or using npx. npm global install is a common but higher-impact install method (modifies system PATH); using npx avoids a persistent global install. No downloads from untrusted URLs or archive extraction are present.
Credentials
The skill declares no required environment variables or credentials. It relies on Membrane to manage auth server-side, which is consistent with the guidance in the instructions. The user must trust Membrane with connection credentials and any proxied requests.
Persistence & Privilege
always is false and there is no install spec or code written to disk by the skill itself. The skill does not request elevated or permanent agent privileges beyond the platform defaults.
Assessment
This skill appears coherent for connecting to Courier via Membrane, but consider these practical precautions before installing or using it:
- Verify @membranehq/cli source and version (prefer npx for one-off runs to avoid a global npm install).
- Understand that Membrane will hold and manage your Courier credentials and may proxy arbitrary requests—only connect accounts you trust to this service and review connector permissions.
- When running actions or proxy requests, avoid instructing the agent to send sensitive local data unless you explicitly intend to share it via the connected Courier account.
- Confirm the Membrane service and repository are legitimate (check the vendor and GitHub repo) if you need higher assurance.Like a lobster shell, security has layers — review code before you run it.
latestvk9791pds965pz7rdjjmg896s6h843z3c
License
MIT-0
Free to use, modify, and redistribute. No attribution required.