Jamroom
v1.0.0Jamroom integration. Manage data, records, and automate workflows. Use when the user wants to interact with Jamroom data.
⭐ 0· 59·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description say 'Jamroom integration' and the SKILL.md consistently describes using the Membrane CLI to discover/connect/run Jamroom actions — the requested capabilities are appropriate for that purpose.
Instruction Scope
Instructions are limited to installing/using the Membrane CLI, logging in, creating/using connections, running actions, and proxying requests to the Jamroom API. They do not instruct reading arbitrary system files, unrelated env vars, or exfiltrating data to unexpected endpoints.
Install Mechanism
This is an instruction-only skill (no install spec), but the SKILL.md tells users to run 'npm install -g @membranehq/cli' or use npx. Installing a global npm package runs third‑party code — normal for CLI use, but verify the package source (npm listing, GitHub repo) before installing.
Credentials
The skill declares no required env vars or credentials. It relies on Membrane to handle authentication and credential refresh; this means requests are proxied through Membrane and Membrane will see the request/response and hold tokens — a privacy/third‑party trust consideration, but not disproportionate to the stated function.
Persistence & Privilege
always is false, no install spec writing to disk, no requested system-level config changes or cross-skill modifications. The skill does not request persistent elevated privileges.
Assessment
This skill is instruction-only and appears coherent: it instructs use of the Membrane CLI to interact with Jamroom. Before using/installing it: 1) Verify the @membranehq/cli package and the repository/homepage (npm listing, GitHub) to ensure you trust the publisher. 2) Be aware that Membrane will proxy API calls and hold authentication tokens — sensitive Jamroom data will pass through a third party. 3) Installing global npm packages runs code on your machine; prefer npx or inspect the package if you have concerns. If you need the agent to handle very sensitive data, confirm your data‑handling policy with Membrane first.Like a lobster shell, security has layers — review code before you run it.
latestvk97afbh6grgwhtb7rqm994qpms8489f3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.