Peoplegoal
v1.0.0PeopleGoal integration. Manage data, records, and automate workflows. Use when the user wants to interact with PeopleGoal data.
⭐ 0· 69·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with PeopleGoal and all runtime instructions use the Membrane CLI to discover connections, run actions, and proxy API requests. Requesting a Membrane account and network access is coherent with that purpose. One minor mismatch: registry metadata declares no required binaries, but SKILL.md requires the Membrane CLI (installed via npm).
Instruction Scope
SKILL.md stays on-topic: it instructs installing/using the Membrane CLI, logging in (browser-based auth), listing/connecting PeopleGoal connectors, running actions, and proxying requests. It does not tell the agent to read unrelated files, environment variables, or exfiltrate data to third-party endpoints outside Membrane/PeopleGoal.
Install Mechanism
The install instructions recommend npm install -g @membranehq/cli or using npx. Installing a scoped package from the public npm registry is a common choice but carries the usual npm risks (global installs run install scripts). This is proportional to the CLI-based workflow, but users should verify the package/source and prefer npx if they want to avoid a global install.
Credentials
No environment variables or credentials are requested by the skill itself; SKILL.md explicitly instructs not to ask users for PeopleGoal API keys and instead to use Membrane's connection flow. The requested privileges (network + Membrane account) are proportionate to a third-party integration.
Persistence & Privilege
The skill is instruction-only, has no install spec that writes files, and does not request always:true or system-wide configuration changes. It does not attempt to modify other skills or agent configs beyond standard use of the Membrane CLI.
Assessment
This skill is coherent: it uses the Membrane CLI to manage PeopleGoal interactions and intentionally avoids asking you for PeopleGoal API keys. Before installing, verify the @membranehq/cli package and its GitHub repo (to ensure you trust the vendor), consider using npx instead of a global npm install to reduce system impact, and be aware the workflow requires a Membrane account and network access. Also note a small metadata omission: the registry entry doesn't list the required CLI binary even though SKILL.md expects it, so expect to install the Membrane CLI to use this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97cd1qtmtenpg4ebc6nxkzjt5845158
License
MIT-0
Free to use, modify, and redistribute. No attribution required.