Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Haproxy
v1.0.0HAProxy integration. Manage data, records, and automate workflows. Use when the user wants to interact with HAProxy data.
⭐ 0· 43·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description say this integrates with HAProxy and the SKILL.md consistently instructs using the Membrane CLI and a Membrane account to interact with HAProxy. No unrelated credentials, binaries, or system paths are requested.
Instruction Scope
Instructions are limited to installing and using the Membrane CLI, authenticating via browser, creating a connection, listing actions, running actions, and proxying API requests through Membrane. The skill does not instruct the agent to read arbitrary local files, environment variables, or system configuration.
Install Mechanism
There is no formal install spec in the registry (instruction-only). The SKILL.md asks users to run `npm install -g @membranehq/cli` (or npx in examples). Global npm installs have typical supply-chain considerations; otherwise the install step is standard and expected for a CLI-based integration.
Credentials
The skill declares no required environment variables, secrets, or config paths. The instructions explicitly avoid asking for API keys and rely on Membrane-managed connections, which is proportionate to the stated functionality.
Persistence & Privilege
The skill is not always-enabled and has no install-time persistence (instruction-only). Autonomous invocation by the agent is allowed by default but that is normal and not combined with other high-privilege requests.
Assessment
This skill is instruction-only and forwards HAProxy interactions through the Membrane service/CLI. Before installing or following the instructions: (1) Confirm you trust the Membrane project and the npm package @membranehq/cli (check the official site and package publisher); (2) prefer using the npx example if you want to avoid a global npm install; (3) understand that proxying via Membrane means Membrane's servers will see requests and responses for your HAProxy API—ensure this is acceptable for your privacy/compliance needs; (4) the skill does not ask for local secrets, but you will authenticate via browser to Membrane, so verify the authentication flow and domain; (5) because this is instruction-only, no code is written to your system by the registry—only the CLI you choose to install will run locally.Like a lobster shell, security has layers — review code before you run it.
latestvk972tq0nddz7m6wb4hdv46q9p184c2e7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.