Blueshift
v1.0.0BlueShift integration. Manage data, records, and automate workflows. Use when the user wants to interact with BlueShift data.
⭐ 0· 49·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name/description (BlueShift integration) matches the instructions: it uses Membrane CLI to connect to BlueShift, discover actions, run actions, and proxy raw API requests. No unrelated env vars or binaries are requested.
Instruction Scope
Runtime instructions are scoped to installing and using the Membrane CLI, creating a connection, listing actions, running actions, and proxying requests to BlueShift. The instructions do not tell the agent to read local files or unrelated credentials. Important: proxying means request/response payloads and any data you send will flow through Membrane's service (getmembrane.com), which is central to the skill's operation and has privacy/ownership implications.
Install Mechanism
No formal install spec was provided in the registry (instruction-only skill), but SKILL.md instructs installing @membranehq/cli via npm -g (or using npx). Installing from the public npm registry is a common approach but has moderate risk compared with instruction-only/no-install; verify the npm package publisher and consider using npx or a contained environment to avoid global installs.
Credentials
The skill declares no required environment variables or local config paths. Authentication is handled interactively through Membrane (browser auth flow), which is appropriate for the stated purpose. Note that Membrane will hold credentials and manage refresh server-side.
Persistence & Privilege
always is false and the skill does not request permanent/system-level presence or modify other skills' configurations. It relies on the CLI invoked at runtime, which is appropriate for its function.
Assessment
This skill delegates BlueShift access to the Membrane service. Before installing or using it: 1) Confirm you trust Membrane (getmembrane.com) because all proxied requests and data will flow through their servers. 2) Verify the npm package publisher (@membranehq/cli) and prefer npx or a non-global install if you want to avoid global package changes. 3) Use least-privilege accounts where possible and avoid sending sensitive secrets in free-text request bodies. 4) If you need stronger guarantees, review Membrane's privacy/security docs and consider testing CLI commands in an isolated environment first.Like a lobster shell, security has layers — review code before you run it.
latestvk97dam0fhx33kw22013792pwps84fjah
License
MIT-0
Free to use, modify, and redistribute. No attribution required.