Placetel
v1.0.2Placetel integration. Manage Organizations. Use when the user wants to interact with Placetel data.
⭐ 0· 108·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Placetel integration) aligns with the instructions which use the Membrane CLI to interact with Placetel APIs and actions. There are no unrelated environment variables, binaries, or config paths requested.
Instruction Scope
Instructions are focused on installing and using the Membrane CLI to discover and run Placetel actions and to proxy direct API requests. They require network access and a Membrane account and tell the agent to run commands like `membrane login`, `membrane connect`, `membrane action run`, and `membrane request`. The guidance correctly avoids asking for raw Placetel API keys (it delegates auth to Membrane). Note that proxying requests via `membrane request` sends data through Membrane's servers.
Install Mechanism
This is instruction-only (no install spec in metadata), but the SKILL.md instructs installing a third-party npm package (`@membranehq/cli`) or using `npx`. Fetching and running code from npm is a standard but non-trivial risk (network fetch and executing third-party code). The install source is the public npm registry (moderate risk) rather than an arbitrary URL; no extract-from-untrusted-URL behavior is present.
Credentials
The skill declares no required env vars and does not request additional credentials in the instructions (it directs users to create a Membrane connection). That is proportionate: Membrane is described as handling auth, pagination, and token refresh.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings, and is an on-demand instruction-only skill. It requires a Membrane account but does not request persistent elevated privileges.
Assessment
This skill is coherent: it just tells the agent to use the Membrane CLI to operate on Placetel. Before installing or using it, consider: 1) Installing `@membranehq/cli` or running it via `npx` will fetch and execute third‑party code from the npm registry — verify the package identity and trustworthiness. 2) Membrane handles authentication and proxies requests: any data sent via `membrane request` will transit Membrane's infrastructure, so review their privacy/security policy and ensure you trust that provider. 3) The skill is instruction-only so the static scanner had no code to analyze; if you need stronger assurance, review the Membrane CLI code/repository and their terms. 4) Prefer `npx` for one-off commands if you want to avoid a global install, and be aware the login flow opens a browser for authentication.Like a lobster shell, security has layers — review code before you run it.
latestvk9739c2mthvf2zx613bxd0t3cn843wbd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.