Setmore
v1.0.0Setmore integration. Manage data, records, and automate workflows. Use when the user wants to interact with Setmore data.
⭐ 0· 58·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Setmore integration) match the runtime instructions (use Membrane CLI to connect to Setmore). One minor inconsistency: the skill metadata lists no required binaries, but SKILL.md instructs the user to install and run the 'membrane' CLI (via npm). That is reasonable for a CLI-driven integration, but the lack of a declared required binary is a documentation gap rather than a functional mismatch.
Instruction Scope
All instructions focus on connecting to Setmore via Membrane: installing the Membrane CLI, logging in, creating/listing connections, discovering and running actions, and proxying requests. The instructions do not ask the agent to read unrelated files, environment variables, or system-wide configuration. They explicitly tell integrators not to ask users for API keys.
Install Mechanism
Install instructions recommend 'npm install -g @membranehq/cli'. Installing a public npm package globally is a common, moderate-risk pattern for CLIs. There is no arbitrary URL download or archive extraction. Users should still verify the package and publisher (npm/github) before installing globally.
Credentials
The skill declares no environment variables or credentials and the instructions state that Membrane handles authentication server-side. This is proportionate: no local secrets are requested and the flow relies on Membrane account/browser auth.
Persistence & Privilege
The skill is not always-enabled, does not request system-level persistence, and does not attempt to modify other skills or system settings. It is an instruction-only skill and therefore does not itself write files or persist credentials.
Assessment
This skill tells the agent to use the Membrane CLI to access your Setmore data. Before installing or using it: (1) Verify @membranehq/cli on npm/GitHub to ensure you trust the publisher; global npm installs modify your system PATH and run code as your user. (2) Understand that you'll authenticate via Membrane (browser-based flow) and that Membrane will hold the connection credentials server-side — review Membrane's privacy/permissions and the exact connector scopes it requests. (3) The skill does not ask for API keys or local secrets, but you should confirm any specific action or proxy request before running it (to avoid accidental data changes). (4) In headless or automated environments, be careful when copying auth codes or storing CLI tokens. Overall the skill is coherent, but trust in a third-party service (Membrane) is required.Like a lobster shell, security has layers — review code before you run it.
latestvk979a3rebsth8ns0884wj7z8w984b2k6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.