Whitesource

WhiteSource integration. Manage data, records, and automate workflows. Use when the user wants to interact with WhiteSource data.

This skill is coherent: it tells you to install and use the Membrane CLI to interact with WhiteSource and does not ask for extra secrets. Before installing: 1) Verify the @membranehq/cli package and publisher on the npm registry (confirm package integrity and reputation). 2) Prefer using `npx @membranehq/cli@latest` if you want to avoid a global npm install. 3) Understand that the Membrane service will hold your connection/authentication server-side—confirm you trust Membrane for storing those credentials and review their privacy/security documentation. 4) Ensure you have node/npm available (the skill metadata does not declare this requirement). If you want higher assurance, ask the skill author to add an explicit install spec, declare required binaries, and provide a verifiable upstream package URL or checksum.

Type: OpenClaw Skill Name: whitesource Version: 1.0.1 The skill provides instructions for an AI agent to integrate with WhiteSource (Mend) using the Membrane CLI (@membranehq/cli). The logic focuses on standard CLI operations such as installation, authentication, and action discovery/execution. It explicitly follows security best practices by instructing the agent to avoid handling raw API keys and instead delegating credential management to the Membrane platform. No indicators of malicious intent, data exfiltration, or harmful prompt injection were found in SKILL.md or _meta.json.