Wisepops
v1.0.0WisePops integration. Manage data, records, and automate workflows. Use when the user wants to interact with WisePops data.
⭐ 0· 53·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description claim WisePops integration and the SKILL.md exclusively instructs use of the Membrane CLI to connect to WisePops, discover actions, run actions, and proxy API requests. The requested capabilities align with the stated purpose; no unrelated credentials or tools are requested.
Instruction Scope
Instructions are scoped to installing and using the Membrane CLI, performing login, creating connections, listing/ running actions, and proxying requests to WisePops. The SKILL.md does not instruct reading unrelated files, exporting unrelated credentials, or posting data to unexpected endpoints. It explicitly recommends letting Membrane handle credentials rather than requesting API keys locally.
Install Mechanism
There is no formal install spec in the manifest, but the SKILL.md instructs the user to run `npm install -g @membranehq/cli`. Installing a global npm package is expected for a CLI-based integration but carries the usual trust/execution risk of installing third‑party packages from npm; this is proportionate to the skill's purpose but worth user attention.
Credentials
The skill declares no required environment variables or secrets. It relies on a Membrane account for authentication and delegates credential management to Membrane, which is consistent with the described behavior and avoids local secret handling. No unrelated env vars or config paths are requested.
Persistence & Privilege
The skill is not always-enabled and does not request system or cross-skill configuration changes. Autonomous model invocation is allowed by default (platform normal), but there are no indicators the skill requests elevated persistence or modifies other skills.
Assessment
This skill is coherent but consider these practical cautions before installing: (1) Installing `@membranehq/cli` globally runs third-party code on your machine — verify the package, its publisher, and repository before installing. (2) The integration delegates access to your WisePops account to Membrane; review Membrane's privacy/security policies and ensure you trust that service to handle your credentials. (3) The skill enables the agent to run arbitrary proxied API requests via Membrane, which can read or modify WisePops data — only use with agents and accounts you trust. (4) If you prefer not to install global CLIs or delegate credentials, consider using the WisePops API directly with controlled credentials or testing in an isolated environment first.Like a lobster shell, security has layers — review code before you run it.
latestvk975nz1xwyh9b0564vtxn17z9d8485n0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.