ClawHub

Formstack

v1.0.2

Formstack integration. Manage Forms, Users, Roles, Groups, Folders, Themes and more. Use when the user wants to interact with Formstack data.

⭐ 0· 98·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (Formstack integration) matches the instructions: all actions are performed via the Membrane CLI which proxies requests to Formstack. There are no unrelated credentials, binaries, or config paths requested.
✓
Instruction Scope
SKILL.md directs the agent to install and use the Membrane CLI, create connections via interactive OAuth flows, list/run actions, and proxy raw Formstack API requests through Membrane. It does not instruct reading unrelated files, exporting environment variables, or exfiltrating data to unexpected endpoints.
ℹ
Install Mechanism
The skill is instruction-only and recommends installing the Membrane CLI via `npm install -g @membranehq/cli`. NPM global installs execute package install scripts and therefore carry moderate risk compared with no install; however, this is proportional to the stated need to have a CLI. The SKILL.md references an official homepage and GitHub repo which you should verify before installing.
✓
Credentials
The skill declares no required environment variables or credentials and relies on Membrane to manage Formstack OAuth. That is proportionate for the stated purpose. Note: actual credentials will be stored/managed by the Membrane CLI after the user authenticates in-browser — verify Membrane's storage/permission behavior if concerned.
✓
Persistence & Privilege
The skill does not request 'always' presence and uses normal autonomous invocation behavior. It does not attempt to modify other skills or system-wide agent settings in the provided instructions.
Assessment
This skill appears coherent and does what it says: it instructs you to use the Membrane CLI to connect to Formstack via OAuth and run proxyed actions. Before installing or running it: verify the Membrane project (@membranehq) and its npm package/GitHub repo (the SKILL.md includes links), review what permissions Membrane requests during the OAuth flow, avoid entering Formstack API keys directly (the skill explicitly advises against that), and be cautious installing global npm packages on shared systems because install scripts run with your privileges. If you need higher assurance, confirm the skill's registry/source identity (metadata shows an owner id but no upstream publisher name) and inspect the Membrane CLI code or documentation prior to use.

Like a lobster shell, security has layers — review code before you run it.

latestvk9738bg0mpsav4ngedm8efj2zx8420np

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments