Hiphops
v1.0.0Hiphops integration. Manage data, records, and automate workflows. Use when the user wants to interact with Hiphops data.
⭐ 0· 51·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description claim Hiphops integration and the SKILL.md consistently instructs use of the Membrane CLI to discover connectors, create connections, run actions, and proxy API requests. No unrelated services, credentials, or binaries are requested.
Instruction Scope
Runtime instructions are limited to installing/running the Membrane CLI, logging in via the browser, listing actions/connections, running actions, and proxying requests via Membrane. The doc does not instruct reading unrelated files or pulling arbitrary local secrets.
Install Mechanism
This is an instruction-only skill (no install spec). It advises the user to install the public npm package @membranehq/cli (npm install -g or npx usage). That is expected for this integration but users should verify the CLI package source before installing globally.
Credentials
The skill requests no environment variables or credentials and explicitly recommends letting Membrane manage auth server-side rather than asking for API keys. Required access (network + Membrane account) is proportionate to the described functionality.
Persistence & Privilege
The skill is not 'always' enabled and has default agent invocation settings. It does not request persistent system configuration or modify other skills' settings.
Assessment
This skill merely documents using the Membrane CLI to talk to Hiphops and does not ask for local secrets. Before installing or running commands: (1) verify the @membranehq/cli package on npm and its maintainer, (2) prefer using npx for one-off runs instead of global installs if you want lower impact, (3) be mindful when following login flows and only open URLs you expect, and (4) review any JSON output that contains connection IDs or tokens before pasting them into other tools. If you require stronger assurance, check the Membrane project's repository and package integrity (signatures/sha) before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk97effangvwfvmahph7ymc2rx184ewnf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.