Osticket
v1.0.0OsTicket integration. Manage data, records, and automate workflows. Use when the user wants to interact with OsTicket data.
⭐ 0· 31·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the instructions: the SKILL.md consistently describes using Membrane to connect to OsTicket and manage tickets. There are no unexpected environment variables, binaries, or config paths requested that would be unrelated to an OsTicket integration.
Instruction Scope
Instructions are focused: install the Membrane CLI, login, create/connect a connector, list and run actions, or proxy requests to the OsTicket API. The doc explicitly advises against asking users for API keys and does not instruct the agent to read unrelated files or environment variables.
Install Mechanism
This is an instruction-only skill (no install spec). The SKILL.md recommends installing @membranehq/cli via npm -g, which is a common mechanism but will install third-party code on the user's machine. That is expected for this workflow but is the primary install-time risk to consider.
Credentials
No environment variables or credentials are requested by the skill. The instructions rely on Membrane to handle authentication/server-side credential management, which is proportional to the integration purpose.
Persistence & Privilege
The skill does not request always:true or any elevated persistent presence. It is user-invocable and can be run autonomously per platform defaults; that is expected for an integration skill.
Assessment
This skill appears coherent and focused on using the Membrane CLI to operate on OsTicket data. Before installing or running commands: (1) verify the @membranehq/cli package and the Membrane service (review the npm package page and the repository/homepage) to ensure you trust the publisher; (2) be aware npm -g installs code globally on your machine—only install if you trust the package; (3) understand that Membrane will broker access to your OsTicket instance, so review what account/permissions you grant to Membrane; and (4) if you prefer not to install global CLIs, consider running the CLI in a controlled environment (container or VM). If the SKILL.md had asked for unrelated credentials, local file reads, or included hidden install URLs, the assessment would be different.Like a lobster shell, security has layers — review code before you run it.
latestvk97d8kws275hwaj71kqfmkmbzn846v2s
License
MIT-0
Free to use, modify, and redistribute. No attribution required.