Whatconverts
v1.0.0WhatConverts integration. Manage data, records, and automate workflows. Use when the user wants to interact with WhatConverts data.
⭐ 0· 29·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name and description match the instructions: the SKILL.md explains how to use the Membrane CLI to connect to WhatConverts, discover actions, run them, or proxy raw API requests. Required capabilities (network access, Membrane account) align with the stated purpose.
Instruction Scope
All runtime instructions stay within the stated scope: installing/using the Membrane CLI, performing browser-based login, creating connections, listing actions, running actions, and proxying requests to the WhatConverts API. The instructions do not ask the agent to read arbitrary local files or access unrelated environment variables.
Install Mechanism
There is no automated install spec in the skill; the SKILL.md recommends installing @membranehq/cli via `npm install -g`. This is an expected way to obtain the CLI but means the operator will fetch a package from the public npm registry (moderate trust requirement) and may need elevated permissions to install globally. Consider using `npx` or a local install if you prefer not to install global packages.
Credentials
The skill requests no environment variables or secrets (and explicitly advises not to ask users for API keys). However, using Membrane means authentication and API access are mediated by Membrane's service — Membrane will hold and manage the WhatConverts credentials and will proxy requests, so you must trust that third party with the data and access it will have.
Persistence & Privilege
The skill is instruction-only and does not request persistent installation, privileged flags, or modifications to other skills. always is false and there is no install-time persistence requested by the SKILL.md.
Assessment
This skill appears coherent and does what it says: it tells the agent how to use the Membrane CLI to interact with WhatConverts. Before installing/using it, consider: (1) you will fetch @membranehq/cli from npm — review the package and use `npx` or a local install if you don't want a global install; (2) authentication is performed through Membrane (browser flow) and Membrane will store/manage WhatConverts credentials and see proxied request/responses — verify you trust Membrane and review their privacy/permissions; (3) validate the CLI/package source (homepage, npm page, GitHub repo) if you have security concerns; (4) in restricted environments, avoid running global installs with elevated privileges and prefer a sandboxed environment. If you want tighter control, you could use direct WhatConverts API keys instead (but note the SKILL.md recommends letting Membrane manage auth).Like a lobster shell, security has layers — review code before you run it.
latestvk973tm1s8002bmn7n0r0y1tne5847ms1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.