Engageats
v1.0.0EngageATS integration. Manage data, records, and automate workflows. Use when the user wants to interact with EngageATS data.
⭐ 0· 25·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill declares an EngageATS integration and all runtime instructions revolve around using the Membrane CLI to connect, list actions, run actions, and proxy API requests. Requiring the Membrane CLI is coherent with the stated purpose.
Instruction Scope
Instructions are narrowly scoped to installing/using the Membrane CLI, authenticating via browser (or headless flow), discovering actions, and optionally proxying raw API requests through Membrane. No instructions ask the agent to read unrelated local files or environment variables. Important note: proxying and connector flows send EngageATS requests and data through Membrane's service (server-side auth/refresh), so user data and API calls will transit Membrane's infrastructure.
Install Mechanism
There is no registry install spec; the SKILL.md instructs the user to run `npm install -g @membranehq/cli` or use `npx`. Installing an npm CLI globally is expected for a CLI-based integration but carries the usual package-trust considerations (verify publisher, package audit). No direct download URLs or arbitrary archives are used.
Credentials
The skill requests no environment variables or local credentials and explicitly instructs not to ask users for API keys, because Membrane holds/refreshes credentials server-side. This is proportionate to the purpose, though it means credentials will be stored and managed by the Membrane service.
Persistence & Privilege
The skill is instruction-only, has always:false, and does not request persistent presence or modify other skills/configuration. Autonomous invocation is allowed by default but not combined with other concerning privileges.
Assessment
This skill appears to do what it claims, but before installing: (1) be aware that using it routes EngageATS API calls and related data through Membrane's servers — review Membrane's privacy/security policies and trust the service before sending sensitive data; (2) the SKILL.md asks you to install an npm package globally (@membranehq/cli). Verify the npm publisher and the project repository (and prefer using npx if you don't want a global install); (3) the auth flow opens a browser (or uses a headless copy-code flow) — follow the documented auth steps and do not paste secrets into untrusted prompts; (4) if you need an offline or self-hosted integration, this skill relies on Membrane and may be unsuitable. If you want extra assurance, inspect the @membranehq/cli source on GitHub and the Membrane docs before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk9776m8pqpdafq7wqch1vgymjn846mec
License
MIT-0
Free to use, modify, and redistribute. No attribution required.