ClawHub

Toolset

v1.0.0

Toolset integration. Manage data, records, and automate workflows. Use when the user wants to interact with Toolset data.

⭐ 0· 78·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name and description match the runtime instructions: the skill is an integration that uses the Membrane CLI to manage Toolset data. Required capabilities (network access, Membrane account) are coherent with the described functionality.
✓
Instruction Scope
SKILL.md confines runtime actions to installing and using the Membrane CLI (login, connector discovery, action run, proxy requests). It does not instruct reading unrelated files, exporting arbitrary local data, or accessing unrelated credentials. Proxying arbitrary API calls via Membrane is expected for this use case.
ℹ
Install Mechanism
The skill is instruction-only (no install spec), but the doc tells users to run `npm install -g @membranehq/cli` or use `npx`. Installing a global npm CLI is a standard but non-trivial action (writes binaries to disk and runs external code). This is proportionate to the integration, but users should verify the package/source (public npm) and consider using npx to avoid global installs.
✓
Credentials
No environment variables, secrets, or unrelated config paths are requested. Authentication is delegated to Membrane (browser-based login/connection), which is appropriate for delegating credentials to a trusted integration service.
✓
Persistence & Privilege
The skill does not request persistent system-wide privileges, does not set always:true, and does not modify other skills' configs. Autonomous invocation is allowed by default but not combined with any other privilege escalation indicators.
Assessment
This skill is internally coherent: it uses the Membrane CLI to connect to Toolset and manage data. Before installing/using it, verify you trust the Membrane project (@membranehq on npm and https://getmembrane.com), prefer running via `npx` if you don't want a global install, and review what connection permissions Membrane will request for your Toolset/WordPress account. If you are uncomfortable granting an external service access to your Toolset data, do not create the connection. If you allow autonomous agent use of this skill, be aware the agent could run the documented membrane commands when invoked.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bw8qvj10aqsw6ca1ayt7nyx84492t

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments