Shipperhq
v1.0.2ShipperHQ integration. Manage data, records, and automate workflows. Use when the user wants to interact with ShipperHQ data.
⭐ 0· 75·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions: the SKILL.md directs the agent to use Membrane to interact with ShipperHQ. No unrelated credentials, binaries, or system paths are requested.
Instruction Scope
Instructions are limited to installing/using the @membranehq/cli, creating connections, running actions, and proxying requests to ShipperHQ via Membrane. One important operational detail: proxied requests and authentication flows go through Membrane's service, so any request payloads and credentials are transmitted to Membrane and to ShipperHQ as needed. The skill does not instruct reading arbitrary files or environment variables.
Install Mechanism
Install is via npm (npm install -g @membranehq/cli). This is a standard registry install (moderate trust requirement). There is no custom download/extract or untrusted URL usage in the skill instructions.
Credentials
The skill requests no local environment variables or secrets. It requires a Membrane account and browser-based auth, which is proportionate to delegating authentication to a third-party integration platform.
Persistence & Privilege
Skill is user-invocable and not always-enabled. It does not request persistent system privileges, modify other skills, or require system config paths.
Assessment
This skill is coherent but relies on Membrane as a third party: installing @membranehq/cli will run code from the npm registry and using the skill will proxy requests and credentials through Membrane. Before installing, verify you trust Membrane (review its homepage/repo and privacy/security docs), consider using npx or a non-global install if you prefer not to install globally, and avoid entering ShipperHQ API keys locally (the skill explicitly delegates auth to Membrane). If you need to keep data on-premise or avoid third-party proxies, do not use this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97dehk4fvaakqg6nsq7f18mc1842sd5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.