Streak
v1.0.2Streak integration. Manage Persons, Organizations, Deals, Pipelines, Users, Roles. Use when the user wants to interact with Streak data.
⭐ 0· 106·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Streak integration) matches the instructions (use Membrane CLI to connect to Streak, list actions, run actions, or proxy requests). Required network access and a Membrane account are appropriate for this purpose; the skill does not request unrelated credentials or config paths.
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, logging in, listing/connecting to connectors, running actions, and proxying API requests. They do not ask the agent to read arbitrary files or other credentials. Note: proxying sends requests through Membrane's servers, so using this skill routes Streak data via an external service (Membrane) and requires trust in that provider.
Install Mechanism
This is an instruction-only skill (no install spec). The SKILL.md tells users to install the @membranehq/cli globally via npm (and also shows npx usage). Installing a global npm package executes third-party code on the host — a normal requirement for a CLI integration but worth caution. Prefer npx if you want to avoid a global install and review the CLI's source or package metadata before installing.
Credentials
The skill declares no required environment variables and explicitly recommends letting Membrane handle credentials rather than collecting API keys locally. This is proportionate to the stated goal. The remaining consideration is that you must trust Membrane with authentication and proxied data.
Persistence & Privilege
The skill does not request always:true or any special agent-wide privileges. It will rely on the Membrane CLI and the user's Membrane account; the CLI will likely store auth state locally (typical for CLIs) but the skill does not instruct modifying other skills or system-wide configs.
Assessment
This skill looks coherent and does what it says: it uses the Membrane CLI to access Streak. Before installing or running it: (1) review @membranehq/cli on npm and/or its source repo to ensure you trust the publisher; (2) prefer using npx to avoid global installs if you want to limit persistent code on your machine; (3) understand that requests are proxied through Membrane — you are trusting a third party with access to your Streak data and with managing OAuth tokens; (4) check Membrane's privacy/security docs and permissions for the connector before granting access; (5) if you need stricter controls, consider using direct Streak API keys in a controlled environment instead of a third-party proxy.Like a lobster shell, security has layers — review code before you run it.
latestvk973swaar63bw9kzm19889mccd8429bd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.