Giantcampaign
v1.0.2GiantCampaign integration. Manage Leads, Persons, Organizations, Deals, Projects, Activities and more. Use when the user wants to interact with GiantCampaign...
⭐ 0· 110·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, listed actions (subscribers, campaigns, lists, etc.), and instructions all align with a GiantCampaign integration. Requiring the Membrane CLI and a Membrane account is coherent for this purpose.
Instruction Scope
SKILL.md only instructs using the Membrane CLI (login, connect, action list/run, request proxy). It does not direct reading arbitrary local files, environment variables, or unrelated system paths, nor does it instruct exfiltration of secrets.
Install Mechanism
Install instruction is a global npm install of @membranehq/cli (npm registry). This is a reasonable, expected mechanism for a CLI-based skill but does require installing a global package and network access to npm; users should verify the package origin if they have strict install policies.
Credentials
The skill declares no required env vars or credentials and explicitly defers auth to Membrane (browser login / connection flow). This is proportionate to the stated functionality. The only external dependency is a Membrane account.
Persistence & Privilege
always is false and the skill is instruction-only (no files/code written by the skill). Autonomous invocation is allowed by default but not combined with other concerning privileges here.
Assessment
This skill looks coherent and behaves as an instruction-only wrapper for the Membrane CLI. Before installing or using it: (1) confirm you trust Membrane (@membranehq/cli) and the npm package source; (2) understand that connecting will grant Membrane access to your GiantCampaign account—review what access/permissions the connector requests and revoke them if needed; (3) installing the CLI globally requires npm and writes to disk—follow your org's install policy if applicable; (4) avoid pasting raw API keys or secrets into chat prompts—the skill advises using Membrane's connection flow for auth. If you need higher assurance, inspect @membranehq/cli sources or use a vetted runtime environment.Like a lobster shell, security has layers — review code before you run it.
latestvk971dqp9scwbgwsamztm7k8rd5843esb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.