ClawHub

Smoove

v1.0.2

Smoove integration. Manage Organizations, Pipelines, Users, Goals, Filters. Use when the user wants to interact with Smoove data.

⭐ 0· 101·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the instructions: the skill tells the agent to manage Smoove via the Membrane CLI and requires a Membrane account and network access. The actions described (connect, action list/run, proxy requests) align with the stated integration purpose. One minor mismatch: SKILL.md expects npm/npx (to install/run the Membrane CLI) but the skill metadata does not declare Node/npm as a required binary.
✓
Instruction Scope
Instructions are focused on installing and using the Membrane CLI, creating a connection, listing and running actions, and proxying API requests. The skill does not instruct the agent to read unrelated files, collect unrelated environment variables, or send data to unexpected endpoints. It explicitly instructs not to ask users for API keys and to let Membrane manage auth.
ℹ
Install Mechanism
There is no registry install spec (instruction-only). The SKILL.md asks users to install @membranehq/cli from the public npm registry (npm install -g) or use npx. Fetching a CLI from npm is a normal approach, but installing global npm packages executes third-party code—users should verify the package and publisher before installing. This is expected for the stated workflow.
✓
Credentials
The skill does not request environment variables, credentials, or config paths. It relies on Membrane to manage Smoove credentials server-side. That is proportionate to the stated purpose.
✓
Persistence & Privilege
The skill is not always-included, does not request elevated persistence, and does not modify other skills or system settings. Autonomous invocation is allowed by default but is not combined here with broad access or persistent privileges.
Assessment
This skill is instruction-only and tells the agent to use the Membrane CLI to interact with Smoove. Before installing or using it: (1) Confirm you trust https://getmembrane.com and the @membranehq/cli package on npm (review the package/repo and publisher). (2) Be aware the SKILL.md assumes you have Node/npm (or will use npx) — the skill metadata did not list that requirement. (3) Installing a global npm CLI runs third-party code on your system; prefer npx for one-off use if you don't want a global install. (4) Authentication is performed via browser-based login handled by Membrane—do not share API keys; complete the interactive login when prompted. (5) If you need stronger assurance, ask the publisher for a signed release link or an explicit list of required system dependencies.

Like a lobster shell, security has layers — review code before you run it.

latestvk97acfwak6cy8fes1d0th95rzd842qtm

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments