Growsurf
v1.0.2Growsurf integration. Manage Persons, Organizations, Deals, Leads, Projects, Activities and more. Use when the user wants to interact with Growsurf data.
⭐ 0· 102·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The SKILL.md describes using the Membrane CLI to manage Growsurf resources and all instructions (login, connect, action list/run, proxy requests) map directly to that goal. Nothing requested (no env vars, no platform credentials) is unrelated to a CLI-based integration.
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, authenticating via browser, listing/creating connections, running actions, and proxying API requests. The instructions do not ask the agent to read arbitrary files, exfiltrate data to third-party endpoints, or access unrelated system configuration.
Install Mechanism
This is an instruction-only skill (no install spec), but the SKILL.md instructs the user to run `npm install -g @membranehq/cli`. That is a reasonable, commonly used installation step for a CLI, but installing global npm packages modifies the host environment—verify you trust the package and the environment before running it (or install locally/in a sandbox).
Credentials
The skill declares no required environment variables or credentials and explicitly instructs to let Membrane handle credentials rather than asking the user for API keys. The requested actions (browser auth flow, connection IDs) are proportionate to the described integration.
Persistence & Privilege
always is false and the skill is user-invocable only. There are no instructions to modify other skills or system-wide agent settings. Autonomous invocation is allowed by default but is not combined with broad privileges or secrets in this skill.
Assessment
This skill appears to do what it claims: it guides you to install and use the Membrane CLI to connect to Growsurf. Before installing or running commands: 1) confirm you trust the @membranehq/cli package and the homepage (https://getmembrane.com / https://github.com/membranedev/application-skills) if you will install globally; 2) prefer running installation in a controlled environment or virtual environment if you have concerns about global npm installs; 3) be prepared to complete the browser-based login flow (or use the documented headless flow); and 4) never share your raw API keys—use the connector flow as recommended. Overall, nothing in the skill requests unrelated credentials or system access.Like a lobster shell, security has layers — review code before you run it.
latestvk97d0pjd9pfdqc2xf37qm2e8y1842hd0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.