← Back to Skills Marketplace
Vendasta
by
Membrane Dev
· GitHub ↗
· v1.0.1
· MIT-0
117
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install vendasta
Description
Vendasta integration. Manage data, records, and automate workflows. Use when the user wants to interact with Vendasta data.
Usage Guidance
This skill appears to aim at integrating with Vendasta but does not explain how authentication or data flow are handled. Before installing, ask the publisher: (1) exactly how will the skill authenticate to Vendasta or Membrane ( OAuth flow, API key, Membrane token ), and where are tokens stored? (2) what endpoints or services will the agent call, and will any Vendasta data be sent to third parties (e.g., getmembrane.com)? (3) provide the full, concrete SKILL.md runbook showing commands/requests the agent will perform. If you can’t get clear answers or the skill requests sensitive credentials without documented handling, avoid installing it or run it only in an isolated/test account. Note: absence of scanner findings is expected for instruction-only skills and does not imply safety.
Capability Analysis
Type: OpenClaw Skill
Name: vendasta
Version: 1.0.1
The SKILL.md file contains an extremely large, anomalous block of repetitive keywords (e.g., hundreds of lines of 'App App App App') which is a strong indicator of an attempt to manipulate the AI agent's context window or bypass safety filters via token stuffing. Furthermore, the skill instructs the agent to perform high-risk operations including the global installation of an external package (npm install -g @membranehq/cli) and the execution of third-party CLI commands for authentication and data management. While these actions are consistent with the stated purpose of using the Membrane platform, the bizarre formatting and the requirement for unpinned remote code execution make this bundle highly suspicious.
Capability Tags
Capability Assessment
Purpose & Capability
Name/description (Vendasta integration) matches the apparent intent of the SKILL.md (lists Vendasta resources). However the skill metadata mentions a required Membrane account but the skill declares no primary credential or required env vars. Vendasta integrations normally require API credentials for Vendasta or an intermediary; the absent credential declaration is an inconsistency.
Instruction Scope
This is an instruction-only skill with no code, but the visible SKILL.md is largely a long, generic list of entities and platform buzzwords and does not show concrete, scoped run-time steps (how to authenticate, what endpoints are called, what data is transmitted). The compatibility note requiring a Membrane account implies outbound network calls and credential use, yet the instructions provided do not document where credentials come from or how data is handled — that vagueness increases risk.
Install Mechanism
No install spec and no code files are present, so nothing will be written to disk or downloaded by default. Instruction-only skills are lower risk from an install mechanism perspective.
Credentials
The skill claims it needs a Membrane account and network access but declares no required environment variables or primary credential. A Vendasta integration typically needs API tokens/keys; the lack of declared credentials or explanation of how auth is supplied (user prompt, UI-based OAuth, Membrane token) is disproportionate and unclear.
Persistence & Privilege
always is false (no forced inclusion). The skill does not request persistent system-wide changes, does not include an install step, and does not modify other skills or agent-wide settings in the metadata provided.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install vendasta - After installation, invoke the skill by name or use
/vendasta - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Auto sync from membranedev/application-skills
v1.0.0
Auto sync from membranedev/application-skills
Metadata
Frequently Asked Questions
What is Vendasta?
Vendasta integration. Manage data, records, and automate workflows. Use when the user wants to interact with Vendasta data. It is an AI Agent Skill for Claude Code / OpenClaw, with 117 downloads so far.
How do I install Vendasta?
Run "/install vendasta" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Vendasta free?
Yes, Vendasta is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Vendasta support?
Vendasta is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Vendasta?
It is built and maintained by Membrane Dev (@membranedev); the current version is v1.0.1.
More Skills