ClawHub

Twikey

v1.0.0

Twikey integration. Manage data, records, and automate workflows. Use when the user wants to interact with Twikey data.

⭐ 0· 55·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The SKILL.md describes a Twikey integration that uses the Membrane CLI to manage Twikey data — that is consistent with the skill's stated purpose. However, the registry metadata lists no required binaries while the instructions clearly require the 'membrane' CLI (and npm to install it). The skill should declare the membrane CLI (and/or npm) as required.
✓
Instruction Scope
All runtime instructions stay within the stated purpose: install Membrane CLI, login to Membrane, create/connect a Twikey connection, run actions, or proxy requests to Twikey via Membrane. The instructions do not request unrelated file/system access or unrelated credentials.
ℹ
Install Mechanism
There is no formal install spec in the registry, but SKILL.md instructs installing @membranehq/cli globally via npm. This is a common, low-to-moderate-risk pattern, but the skill should have declared the dependency and/or provided an install spec. Users should be aware that a global npm install modifies the environment.
✓
Credentials
The skill does not request any environment variables or other credentials in the manifest. Authentication is performed via Membrane (OAuth/browser flow), which aligns with the stated guidance of not asking for Twikey API keys locally.
✓
Persistence & Privilege
The skill does not request 'always' presence and does not ask to modify other skills or system-wide configuration. Autonomous invocation is allowed (the platform default) but not combined with elevated or unexpected privileges.
Assessment
This skill directs you to install and use the Membrane CLI to connect your Twikey account; before proceeding, verify you trust Membrane (check https://getmembrane.com and the npm package @membranehq/cli). Note the SKILL.md requires the 'membrane' binary (and npm to install it) even though the registry metadata doesn't list required binaries. Connecting will grant Membrane access to your Twikey account and allow actions and proxied API calls — only connect accounts you are comfortable granting that access to, and prefer a least-privilege or test account if you want to limit potential impact. If you cannot or do not want to install a global npm CLI, consider running the CLI in a controlled environment (container or dedicated VM) or decline installation.

Like a lobster shell, security has layers — review code before you run it.

latestvk979bcfn85ccwavc882tdzzxb984byeh

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments