Jobber
v1.0.0Jobber integration. Manage data, records, and automate workflows. Use when the user wants to interact with Jobber data.
⭐ 0· 29·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the runtime instructions: the SKILL.md documents how to use the Membrane CLI to connect to Jobber, discover actions, run actions, and proxy raw API requests. Required capabilities (network + Membrane account) are appropriate for a cloud integration.
Instruction Scope
Instructions are focused on installing and using the Membrane CLI, creating connections, listing and running actions, and proxying requests to Jobber. They do not instruct reading arbitrary system files, scraping unrelated environment variables, or sending data to unexpected endpoints. The SKILL.md explicitly advises not to ask users for Jobber API keys (delegating auth to Membrane).
Install Mechanism
There is no install spec in the registry (instruction-only), but the README tells users to install @membranehq/cli via npm -g (global npm install) or use npx. Installing a third-party CLI globally is a moderate-risk action that is expected for this integration, but users should verify the package/source and prefer npx or local installs if they want to avoid global binaries.
Credentials
The skill does not request environment variables or local credentials. It delegates authentication to Membrane, which is proportionate for the stated purpose. Note: delegating auth means the user will grant Membrane (a third party) access to Jobber data—this is expected but worth explicit user consideration.
Persistence & Privilege
The skill does not request persistent/always-on privileges and is user-invocable. It does not modify other skills or system-wide config from the documented instructions.
Assessment
This skill is an instruction-only guide to using the Membrane CLI to access Jobber and is internally consistent. Before installing or following the steps: 1) Verify the @membranehq/cli package and publisher (prefer npx to avoid global installs). 2) Understand that authenticating grants Membrane (their service) access to your Jobber account—review Membrane's permissions, privacy policy, and requested scopes. 3) Where possible, use a least-privilege or test Jobber account to validate integration. 4) Monitor activity and revoke the connection if you see unexpected accesses. If you need stronger assurance, inspect the Membrane CLI source repo and the connection consent screen shown during authentication.Like a lobster shell, security has layers — review code before you run it.
latestvk97enzbxbz3exxwz9rkz0bwamd848jpy
License
MIT-0
Free to use, modify, and redistribute. No attribution required.