Echtpost Postcards
v1.0.2EchtPost Postcards integration. Manage Postcards, Campaigns, Templates, Users. Use when the user wants to interact with EchtPost Postcards data.
⭐ 0· 128·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (EchtPost Postcards integration) match the runtime instructions: all guidance is about using the Membrane CLI to discover connectors/actions, create connections, run actions, and proxy API requests to EchtPost. No unrelated services, binaries, or secrets are requested.
Instruction Scope
SKILL.md directs the agent to install and use the Membrane CLI, run commands like connection list, action list/run, and membrane request. All referenced files/commands/envs are within the expected scope for a connector integration; there are no instructions to read unrelated system files or to exfiltrate data to third-party endpoints.
Install Mechanism
This is an instruction-only skill (no install spec in the registry), but it tells users to install the Membrane CLI via 'npm install -g @membranehq/cli'. Installing a public npm CLI globally is a normal way to get a CLI, but it carries the usual supply-chain considerations (npm package provenance).
Credentials
No environment variables, credentials, or config paths are required by the skill itself. The instructions rely on Membrane-managed credentials and browser-based login, which is proportionate to the described purpose.
Persistence & Privilege
The skill does not request always:true or any elevated persistence. It is user-invocable and the default autonomous invocation flag is unchanged; nothing in the skill attempts to modify other skills or system-wide settings.
Assessment
This skill is coherent with its stated purpose, but before installing anything: (1) verify the Membrane CLI package (@membranehq/cli) is the correct official package on npm and that you trust its publisher; (2) review Membrane's privacy/permissions because creating a connection gives Membrane server-side access to your EchtPost account and will proxy API requests on your behalf; (3) prefer installing the CLI in a controlled environment (or using a local Node version manager) rather than system-wide if you have supply-chain concerns; and (4) never paste local API keys into prompts — this skill explicitly advises using Membrane connections instead of sharing raw keys.Like a lobster shell, security has layers — review code before you run it.
latestvk9744f6kdd9rr843arpq6593698425vb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.