Melo
v1.0.2Melo integration. Manage Organizations, Pipelines, Users, Goals, Filters. Use when the user wants to interact with Melo data.
⭐ 0· 102·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Melo integration) align with the instructions: all actions are performed via the Membrane CLI and Membrane's proxy to Melo. There are no unrelated environment variables, binaries, or config paths requested.
Instruction Scope
SKILL.md instructs only CLI commands (membrane login, action list/run, request) and browser-based auth flows. It does not ask the agent to read local files, shell history, or unrelated environment variables, nor does it direct data to endpoints other than Membrane/Melo.
Install Mechanism
The registry has no formal install spec, but the instructions tell the user to run `npm install -g @membranehq/cli`. This is expected for a CLI-based integration, but global npm installs modify the host and execute third-party code — verify the package is the official Membrane CLI (npm page, repository, checksums) before installing.
Credentials
The skill requests no environment variables or credentials; it defers auth to Membrane connections. That is proportionate to a third-party integration and avoids asking the user for API keys.
Persistence & Privilege
always:false and no install-time hooks are present. The skill does not request persistent system-wide privileges or modify other skills' configs. Note: agent autonomous invocation is allowed by default (normal behavior) but unrelated to any other red flags here.
Assessment
This skill appears coherent, but before installing/use: 1) Verify the @membranehq/cli package is the official CLI (check npm listing, GitHub repo, publisher, and recent release notes). 2) Be aware `npm install -g` installs and executes code on your machine — consider installing in a container or limited environment if you are unsure. 3) Understand Membrane will act as a proxy and hold connection credentials for Melo; only proceed if you trust the Membrane service and its auth flows. 4) If you want tighter control, confirm there are no additional local scripts you need to run and review any network traffic policies in your environment. If you want more assurance, provide the CLI package URL or repository and I can check it for inconsistencies or suspicious signs.Like a lobster shell, security has layers — review code before you run it.
latestvk975dz45fftxzc17v5a8kfz8xn843g28
License
MIT-0
Free to use, modify, and redistribute. No attribution required.