Proxy Spider
v1.0.2Proxy Spider integration. Manage Organizations. Use when the user wants to interact with Proxy Spider data.
⭐ 0· 117·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name and description describe a Proxy Spider integration and the SKILL.md consistently instructs use of the Membrane CLI to discover connectors, create connections, run actions, and proxy API requests — all expected for this purpose.
Instruction Scope
Instructions are focused on installing and using the Membrane CLI and managing connections/actions. They do not instruct reading unrelated files, exporting arbitrary environment variables, or exfiltrating data outside Membrane/Proxy Spider. The doc explicitly advises against asking users for API keys.
Install Mechanism
The install is an npm global install (npm install -g @membranehq/cli) and npx usage — a common pattern for CLIs. This is moderate-risk compared with no-install instruction-only skills because it writes a binary to the system and requires trusting the @membranehq package from the public npm registry. That trust is reasonable for this integration but worth user verification (package ownership, popularity, and the repo).
Credentials
No environment variables, credentials, or config paths are requested by the skill itself. Authentication is delegated to Membrane via browser-based login and connections, which is appropriate for the described workflow.
Persistence & Privilege
The skill is not always-on and does not request elevated platform privileges. It does not modify other skills or request permanent platform-level presence.
Assessment
This skill is coherent: it delegates auth and API access to Membrane and instructs using the Membrane CLI. Before installing, verify the @membranehq/cli package and repository (authorship, npm download counts, GitHub repo) to ensure you're installing the official CLI. Installing npm -g packages requires elevated permissions and will place a binary on your system — consider using npx for ephemeral runs or installing in a controlled environment. Be aware that using Membrane means the service will mediate requests to Proxy Spider and will hold any credentials/connection tokens; review Membrane's privacy/security documentation and the scopes/consent you grant during the browser login. If you need stricter control, consider connecting directly to Proxy Spider via its official API with your own credentials instead of using a third-party proxy service.Like a lobster shell, security has layers — review code before you run it.
latestvk97cba5env07frajz8caqnds39842483
License
MIT-0
Free to use, modify, and redistribute. No attribution required.