Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Marketing Miner
v1.0.0Marketing Miner integration. Manage data, records, and automate workflows. Use when the user wants to interact with Marketing Miner data.
⭐ 0· 26·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Skill name/description match the runtime instructions: it instructs the agent/user to use the Membrane CLI to connect to Marketing Miner, list actions, run actions, and proxy raw API requests. Required capabilities (network access, Membrane account) are consistent with this purpose.
Instruction Scope
SKILL.md confines behavior to installing/using the Membrane CLI, performing connector discovery, creating connections, listing and running actions, and proxying requests to Marketing Miner via Membrane. It does not instruct reading unrelated files or exporting environment variables or secrets. It does require interactive browser-based auth for connection setup (documented).
Install Mechanism
No install spec is bundled with the skill (instruction-only). The doc tells the user to run `npm install -g @membranehq/cli` or use npx. Using npm (public registry) is a standard mechanism, but global npm installs run third-party code on the machine — consider using npx or reviewing the package before installing.
Credentials
The skill declares no required environment variables or credentials. Authentication is delegated to Membrane (server-side) via interactive login. This is proportionate to the skill's stated behavior, though it means Membrane will handle and proxy credentials for Marketing Miner.
Persistence & Privilege
The skill does not request always:true or any special system-wide persistence. It is user-invocable and may be invoked autonomously per platform defaults; that is normal and expected for a connector skill.
Assessment
This skill is coherent: it uses the Membrane CLI to manage Marketing Miner connections and run actions. Before installing/using it, consider: (1) Membrane will proxy requests and hold/refresh your Marketing Miner auth — review Membrane's privacy/security policies and trustworthiness. (2) The instructions recommend installing a global npm package; prefer using npx or inspect the @membranehq/cli package on npm/GitHub before running global installs. (3) Authentication requires opening a browser (or completing a headless flow) — perform that on a trusted device. If you need to avoid sending data through a third party, do not use this skill and instead integrate directly with Marketing Miner using your own credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk971hkmg35f17k83vbw747m7vd8463vs
License
MIT-0
Free to use, modify, and redistribute. No attribution required.