Integromat
v1.0.0Integromat integration. Manage data, records, and automate workflows. Use when the user wants to interact with Integromat data.
⭐ 0· 37·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Integromat integration) matches the instructions: all runtime steps use the Membrane CLI to discover connectors, create connections, run actions, and proxy API calls to Integromat. No unrelated services, env vars, or binaries are requested.
Instruction Scope
SKILL.md stays on-topic: it tells the user to install and use the Membrane CLI, how to authenticate, how to list/connect actions, and how to proxy requests. It does not instruct reading unrelated files, harvesting local env vars, or sending data to unexpected endpoints. It correctly notes Membrane will manage credentials.
Install Mechanism
The skill is instruction-only (no registry install), but SKILL.md recommends installing @membranehq/cli via npm (global) and suggests npx @membranehq/cli@latest. That's a normal way to install/run a third-party CLI, but it means running code fetched from the npm registry (and npx/@latest fetches the most recent published package). Consider the usual caution when installing/running third-party packages.
Credentials
The skill declares no required environment variables or credentials and explicitly directs the user to create a connection so Membrane manages auth. Requesting a Membrane account and browser-based login is proportionate to the stated purpose. Note: Membrane's backend will hold tokens for the connected Integromat account (expected for this integration).
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and is user-invocable. There is no indication it writes persistent system-wide configuration or accesses other skills' credentials.
Assessment
This skill appears to do what it says: it uses the Membrane CLI as a proxy to Integromat and requires a Membrane account. Before you install/run anything, consider: 1) installing or running the CLI executes third-party code from npm — review the @membranehq/cli npm page and source on GitHub, and prefer a pinned version instead of npx @latest; 2) understand that Membrane's service will hold and proxy your Integromat credentials and can see data passed through it; verify Membrane's privacy/security policy if that matters; 3) if you want extra safety, test in an isolated or least-privilege account/environment and run npm audit on the package. No local secrets or unrelated system access are requested by the skill itself.Like a lobster shell, security has layers — review code before you run it.
latestvk9784ajqft26zs99zv75xpepzn849n2e
License
MIT-0
Free to use, modify, and redistribute. No attribution required.