Segment

Segment integration. Manage Workspaces. Use when the user wants to interact with Segment data.

This skill appears to do what it says — it instructs you to use the Membrane CLI to manage Segment workspaces. Before installing or running anything: (1) confirm you trust the Membrane project and the npm package (review the package and repository at https://github.com/membranedev/application-skills and upstream @membranehq/cli); (2) prefer installing in a controlled environment (container, VM, or non-root) rather than doing a global npm install on a production machine; (3) verify the authentication flow and never paste API keys into chat — the skill advises using Membrane to hold credentials server-side; (4) be aware the skill is instruction-only and will ask you to run CLI commands locally — only run commands you understand. If you need higher assurance, request an install spec or a signed release URL for the CLI package before proceeding.

Type: OpenClaw Skill Name: segment-integration Version: 1.0.3 The skill instructions in SKILL.md direct the agent to perform high-risk operations, including the global installation of a third-party CLI tool (@membranehq/cli) and the execution of shell commands for authentication and remote service interaction. While these actions are aligned with the stated purpose of Segment integration via the Membrane platform, the reliance on external CLI dependencies and shell-based credential management constitutes a high-risk profile that meets the criteria for a suspicious classification.