Easyship
v1.0.2Easyship integration. Manage Shipments, Trackers, Addresses, Users. Use when the user wants to interact with Easyship data.
⭐ 0· 138·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Easyship integration) match the instructions (use Membrane CLI to connect to Easyship and run actions). No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md only instructs installing the Membrane CLI and using its commands (login, connect, action run, proxy requests). It does not ask the agent to read unrelated files, exfiltrate data, or access system paths beyond running the CLI and opening a browser for auth.
Install Mechanism
The README recommends installing @membranehq/cli via `npm install -g`. This is a typical but non-trivial install (global npm package) — a normal choice for a CLI integration, but it carries the usual supply-chain and system-modification risks of installing a global npm package.
Credentials
The skill declares no required env vars or credentials and explicitly tells users not to provide API keys (Membrane handles auth). This is proportionate to the stated purpose. Be aware the Membrane CLI will store tokens locally as part of its login flow.
Persistence & Privilege
The skill does not request always-on presence and uses the agent-invocable default. There is no instruction to modify other skills or system-wide agent settings.
Assessment
This skill is an instruction-only wrapper around the Membrane CLI to talk to Easyship; that is coherent. Before installing: verify the @membranehq/cli npm package is the official package (check npmjs.org, GitHub repo, and maintainer), and prefer installing the CLI in a controlled environment (container or VM) if you want to avoid global npm changes. Expect the CLI's login flow to open a browser and store authentication tokens locally — review Membrane's docs/privacy if that matters. If you are uncomfortable installing third-party CLIs, consider using Membrane's web console or reviewing the Easyship API directly.Like a lobster shell, security has layers — review code before you run it.
latestvk97f6h4bdf3v8f1kb8th63cdyn843gam
License
MIT-0
Free to use, modify, and redistribute. No attribution required.