ClawHub

Workos

v1.0.0

WorkOS integration. Manage data, records, and automate workflows. Use when the user wants to interact with WorkOS data.

⭐ 0· 49·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (WorkOS integration) match the instructions (use Membrane CLI to connect to WorkOS). The referenced homepage and repository are for Membrane, which is the stated intermediary; asking users to create a Membrane connection is consistent with the skill's purpose.
✓
Instruction Scope
Runtime instructions are limited to installing and using the Membrane CLI, logging in via browser, discovering actions, running actions, and optionally proxying requests to WorkOS through Membrane. The doc does not instruct reading unrelated files or exfiltrating data outside the Membrane/WorkOS flow.
ℹ
Install Mechanism
There is no formal install spec in the registry (instruction-only), but SKILL.md tells users to install @membranehq/cli via npm (global install) or invoke via npx. Installing a global npm CLI is a normal way to use this integration, but it does execute third-party npm code — verify the package and author before installing.
✓
Credentials
No environment variables or local secrets are requested. The skill explicitly tells the agent not to ask users for WorkOS API keys and relies on Membrane for auth, which is proportionate to the stated function.
✓
Persistence & Privilege
The skill does not request always:true or system-wide config changes. It's user-invocable and can be invoked autonomously (platform default), which is expected for a connector-style skill.
Assessment
This skill is instruction-only and appears coherent: it asks you to install and use the Membrane CLI to manage WorkOS resources and does not demand unrelated credentials. Before installing, verify the @membranehq/cli package and publisher on the npm registry (or use npx to avoid a global install), ensure you trust Membrane as the intermediary, and be comfortable completing browser-based login flows. Do not share WorkOS or other API keys directly with the agent; follow the documented Membrane connection flow instead.

Like a lobster shell, security has layers — review code before you run it.

latestvk977q1c11v0rg1qdzh38t6eng5849186

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments