ClawHub

Signrequest

v1.0.2

SignRequest integration. Manage SignRequests, Teams, Users. Use when the user wants to interact with SignRequest data.

⭐ 0· 127·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (SignRequest integration) matches the instructions: all actions are performed via the Membrane CLI and/or Membrane proxy to SignRequest. Nothing requested (no env vars, no unrelated binaries) is out of scope for this purpose.
✓
Instruction Scope
SKILL.md only instructs installing and using the Membrane CLI, creating connections, listing actions, running actions, and proxying requests to SignRequest. It does not instruct reading local files, accessing unrelated environment variables, or transmitting data outside Membrane/SignRequest.
ℹ
Install Mechanism
There is no embedded install spec, but the doc tells the user to install the Membrane CLI via 'npm install -g @membranehq/cli' and uses 'npx' in examples. Installing or running npm packages executes third-party code and modifies the system PATH (global install). This is expected for a CLI-based integration but is a standard security consideration: only install if you trust @membranehq/cli and your npm registry.
✓
Credentials
The skill declares no required environment variables or credentials and explicitly advises using Membrane connections instead of asking for API keys. The requested access (network + Membrane account) is proportionate to the described functionality.
✓
Persistence & Privilege
The skill is instruction-only, does not request persistent system-wide configuration, and does not set always:true. Autonomous invocation is allowed (platform default) but does not combine with other concerning privileges.
Assessment
This skill is coherent and uses the Membrane CLI to access SignRequest. Before installing: verify you trust the Membrane project/organization (@membranehq) and the homepage (getmembrane.com); installing the CLI via 'npm -g' or running 'npx' will execute code from the npm registry and modify your system environment—follow your organization's policy for third-party CLI installs. Expect browser-based authentication for linking SignRequest accounts; the skill itself does not collect or ask for SignRequest API keys or other unrelated credentials.

Like a lobster shell, security has layers — review code before you run it.

latestvk976za0zny4ermw9w5h4pxm07d842vaa

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments