Growth Book
v1.0.0Growth Book integration. Manage data, records, and automate workflows. Use when the user wants to interact with Growth Book data.
⭐ 0· 68·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill says it's a Growth Book integration and the runtime instructions consistently use the Membrane CLI to discover connectors, create connections, run actions, and proxy API requests to Growth Book — this matches the stated purpose.
Instruction Scope
SKILL.md only instructs installing and using the Membrane CLI, authenticating via browser, listing connections/actions, running actions, and proxying requests. It does not direct reading unrelated files, requesting unrelated environment variables, or exfiltrating data to unexpected endpoints.
Install Mechanism
The skill recommends 'npm install -g @membranehq/cli' (global npm install). This is a normal way to get the required CLI but carries the usual risks of installing third-party npm packages on the host; the instructions do not reference downloads from untrusted URLs or extraction of arbitrary archives.
Credentials
No environment variables or credentials are requested by the skill itself; authentication is delegated to Membrane via browser login. Users should note that Membrane (a third-party service) will handle and therefore see proxied Growth Book requests and credentials on the server side.
Persistence & Privilege
The skill is instruction-only, has no install spec and does not request always:true or other elevated persistence. It does not attempt to modify other skills or system-wide agent configuration.
Assessment
This skill appears to do what it claims: it uses the Membrane CLI to access Growth Book. Before installing or running the CLI, consider: (1) installing global npm packages modifies your environment — use a controlled machine or container if you prefer isolation; (2) Membrane is a third-party proxy: proxied API calls and auth flows will be handled server-side by Membrane, so review their privacy/security practices if your Growth Book data is sensitive; (3) follow the guidance in SKILL.md and do not manually paste API keys into chat — the skill explicitly recommends using connections rather than local secrets. If you need higher assurance, test in a non-production environment first.Like a lobster shell, security has layers — review code before you run it.
latestvk97366w026e9rx1y6krc4b8vnn8427af
License
MIT-0
Free to use, modify, and redistribute. No attribution required.