Speakeasy
v1.0.0Speakeasy integration. Manage data, records, and automate workflows. Use when the user wants to interact with Speakeasy data.
⭐ 0· 23·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The SKILL.md describes a Speakeasy integration implemented via the Membrane CLI (searching connectors, creating connections, running proxied requests). That matches the skill name and description. One minor inconsistency: the registry metadata lists no required binaries, but the runtime instructions explicitly instruct installing and using the Membrane CLI (npm/@membranehq/cli) and npx. The CLI requirement is expected for the stated purpose but the metadata omission is a discrepancy the user should be aware of.
Instruction Scope
The instructions stay within the integration's scope: install Membrane CLI, authenticate, create or find a Speakeasy connection, list actions, run actions, and optionally proxy raw API calls through Membrane. The skill does not instruct reading unrelated files or environment variables, nor sending data to arbitrary third-party endpoints outside Membrane/Speakeasy.
Install Mechanism
There is no formal install spec (instruction-only), which is low risk. However the runtime instructions ask users to install an npm package globally (npm install -g @membranehq/cli) or use npx. Installing a third-party CLI from npm is normal for this use case but carries the usual provenance risks — verify the package and publisher on npm/GitHub before installation.
Credentials
The skill declares no required environment variables or credentials and explicitly advises letting Membrane handle auth rather than asking for API keys. That is proportionate: Membrane handles auth server-side and the skill's actions rely on that connection flow.
Persistence & Privilege
The skill is user-invocable and not always-enabled; it does not request persistent elevated privileges or claim to modify other skills or system-wide agent settings. This is consistent with a normal integration.
Assessment
This skill appears coherent for integrating with Speakeasy via the Membrane CLI, but before installing or using it: 1) Verify the Membrane CLI package (@membranehq/cli) on npm and the linked GitHub repo to confirm publisher provenance. 2) Be aware the SKILL.md expects you to install and run a CLI (npm/npx) even though the registry metadata didn't list required binaries — ensure you want that tool on your machine. 3) Membrane will open browser-based auth flows and hold credentials server-side; only complete logins from trusted devices and avoid pasting secrets into chat. 4) Review what connector permissions are requested when you create the Speakeasy connection (least privilege). 5) If you need a higher assurance, inspect the Membrane CLI source and the repository linked in the SKILL.md before using the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97fgyxrvddcbxejh85jzgh459846ezv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.