Ibm X Force Exchange
v1.0.2IBM X-Force Exchange integration. Manage data, records, and automate workflows. Use when the user wants to interact with IBM X-Force Exchange data.
⭐ 0· 92·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with IBM X-Force Exchange and all runtime instructions use the Membrane CLI to perform connector discovery, connection, and action execution — this matches the stated purpose. Minor metadata omission: the skill metadata does not list the Membrane CLI as a required binary even though SKILL.md instructs users to install and run the `membrane` command.
Instruction Scope
SKILL.md only instructs the agent/user to install and use the Membrane CLI to create connections, list actions, run actions, and proxy requests to the IBM X-Force API. It does not ask the agent to read unrelated files, exfiltrate local data, or access unrelated credentials. Authentication is described as handled by Membrane and performed in-browser or via a headless flow.
Install Mechanism
There is no install spec in the registry (instruction-only). The instructions recommend installing @membranehq/cli via npm globally (npm install -g), which is a standard, traceable registry install but does write binaries to the system PATH. This is expected for a CLI-based integration but carries the usual moderate risk of installing third-party npm packages — verify the package and publisher before installing.
Credentials
The skill declares no required environment variables or secrets. SKILL.md explicitly advises not to ask users for IBM X-Force API keys and to let Membrane handle credentials. The requested access (a Membrane account and network) is proportionate to the described functionality.
Persistence & Privilege
The skill is not marked always:true and is user-invocable; it does not request persistent system-wide privileges, does not modify other skills, and does not ask to store credentials locally. Autonomous invocation remains enabled by platform default but is not combined with other privilege red flags.
Assessment
This skill is an instruction-only integration that relies on the Membrane CLI to connect to IBM X-Force Exchange. Before using it: (1) verify the Membrane CLI package (@membranehq/cli) and its publisher on npm/GitHub; (2) be prepared to authenticate via a browser (or headless URL flow) so Membrane can manage credentials on your behalf; (3) understand that installing the CLI adds a global binary to your PATH; (4) confirm you trust the Membrane service (homepage and repository links) because the service will proxy requests and hold connector credentials; and (5) note the small metadata omission — the SKILL.md requires the `membrane` binary but the skill metadata does not list it as a required binary. If any of these cause concern, inspect the Membrane CLI source and the referenced GitHub repo before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk97cwzge9gaefgwpda4f59v61s842whz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.