Thrivecart
v1.0.2Thrivecart integration. Manage data, records, and automate workflows. Use when the user wants to interact with Thrivecart data.
⭐ 0· 81·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Thrivecart integration) match the instructions: the SKILL.md exclusively documents using the Membrane CLI to connect to Thrivecart, list actions, run actions, and proxy API requests.
Instruction Scope
Instructions only cover installing and using the Membrane CLI, creating/listing connections, running actions, and proxying requests. They do not instruct reading unrelated files, exfiltrating data, or accessing unrelated credentials.
Install Mechanism
This is an instruction-only skill with no embedded code; it tells users to install @membranehq/cli via `npm install -g`. That is coherent for a CLI but carries the usual npm-global risks (global package execution and arbitrary code at install time) — expected but worth noting.
Credentials
The skill declares no required env vars or credentials and defers auth to the Membrane service. This is proportionate for a connector-based integration; ensure you trust the Membrane service before authorizing connections to Thrivecart.
Persistence & Privilege
always is false and there are no install-time behaviors that alter other skills or system-wide agent settings. The skill does not request persistent elevated privileges.
Assessment
This skill is internally consistent: it instructs you to install and use the official Membrane CLI to talk to Thrivecart and avoids asking for raw API keys. Before installing, verify the @membranehq/cli package and the Membrane service (homepage and repo links), and be aware that `npm install -g` runs code on your machine — if you're unsure, install the CLI in an isolated environment or container and review the package source and permissions Membrane requests when you create the Thrivecart connection.Like a lobster shell, security has layers — review code before you run it.
latestvk971ezjfcndpk7xqa1rswwv6nd843fxq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.