Whereby
v1.0.0Whereby integration. Manage data, records, and automate workflows. Use when the user wants to interact with Whereby data.
⭐ 0· 51·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description claim a Whereby integration and the SKILL.md consistently instructs using Membrane (a connector/proxy) to access Whereby. Required capabilities (network access, a Membrane account, and installing @membranehq/cli) match the stated purpose and nothing unrelated is requested.
Instruction Scope
Runtime instructions are limited to installing/running the Membrane CLI, performing browser-based login, creating connections, listing actions, running actions, and proxying requests to the Whereby API. The instructions do not ask the agent to read arbitrary local files, search shell history, or exfiltrate unrelated data. They do rely on the user performing interactive browser auth and creating Membrane connections.
Install Mechanism
There is no formal install spec in the registry; the SKILL.md recommends npm install -g @membranehq/cli (a global npm install). Installing a third-party global CLI has moderate risk because npm packages run code during install. This is proportionate to a CLI-based integration, but users should verify the package and prefer npx or an audited install if they want to avoid a global install.
Credentials
The skill declares no required environment variables or secrets. The instructions explicitly advise letting Membrane handle credentials and not asking users for API keys, which is consistent with a connector/proxy approach. The skill does rely on the user having a Membrane account (server-side) and performing login in a browser.
Persistence & Privilege
The skill is not marked always:true and does not request elevated platform privileges. The only persistent effect is installing/using the Membrane CLI and its local auth/session state (expected for a CLI-based integration). The SKILL.md does not instruct modifying other skills or system-wide settings.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to talk to Whereby and does not ask for unrelated secrets. Before installing: verify the Membrane project and npm package (check the GitHub repo and npm publisher), prefer running with npx (npx @membranehq/cli ...) rather than a global npm -g install if you want to avoid installing code system-wide, and only use accounts you trust with Membrane (the CLI will store auth/session state locally after login). If you have strict security requirements, review the Membrane service's privacy/security documentation and the CLI source code before use.Like a lobster shell, security has layers — review code before you run it.
latestvk9781zn4131x2z6qarz52087w584cqdw
License
MIT-0
Free to use, modify, and redistribute. No attribution required.