Height
v1.0.0Height integration. Manage data, records, and automate workflows. Use when the user wants to interact with Height data.
⭐ 0· 59·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description claim Height integration; SKILL.md consistently instructs the agent to install and use the Membrane CLI to discover actions, create connections, run actions, and proxy requests to the Height API. There are no unrelated credentials, binaries, or config paths requested.
Instruction Scope
Instructions are narrowly focused on using membrane CLI commands (login, connect, action list/run, request) and browser-based auth. The README does not instruct reading arbitrary files, environment variables, or posting data to unexpected endpoints. It explicitly advises against asking users for direct API keys and recommends using Membrane for auth.
Install Mechanism
This is an instruction-only skill (no install spec). It recommends installing @membranehq/cli via npm (npm install -g), which is a standard user-side step but will write a global binary when performed. No embedded downloads or opaque install URLs are present in the skill itself.
Credentials
The skill declares no required env vars or credentials. It relies on Membrane to manage credentials server-side, which is proportionate to a proxy-style integration. The main privacy implication is that Membrane will broker requests and hold tokens — this is expected but worth the user's trust review.
Persistence & Privilege
The skill is not always-enabled and requests no system persistence or modifications to other skills. Model invocation is allowed (default), which is normal for skills and not in itself a concern here.
Assessment
This skill is coherent: it uses the Membrane CLI to talk to Height and does not request extra credentials. Before installing/using it, confirm you trust Membrane (getmembrane.com) because Membrane will broker auth and proxy API requests and therefore will see your Height data and tokens. Installing the CLI uses npm -g which creates a global binary — follow your organization's policy for global installs. If you need stronger data controls, verify Membrane's privacy/security docs or consider using direct API keys with restricted scopes (only if you accept managing tokens locally).Like a lobster shell, security has layers — review code before you run it.
latestvk974440t42bwb2nk4pyc14yets844xwz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.