Seven

Seven integration. Manage Organizations, Users, Goals, Filters. Use when the user wants to interact with Seven data.

This skill appears to do what it says: it uses the Membrane CLI to interact with Seven via a managed connection. Before installing or running anything: - Verify the Membrane project and the npm package (@membranehq/cli) on the official sites/registry to ensure you're installing the genuine CLI. - Check the browser-based login flow and the permissions the Membrane connector requests for your Seven account (you'll be granting Membrane access to act on your behalf). - Note that installing with 'npm install -g' will place a binary on your system; if you cannot or do not want to install software globally, do not run those commands and consider running in a controlled environment (container or VM). - The SKILL.md contains an odd 'Official docs' link to an unrelated domain (7-pdf) — treat that as a metadata error and confirm documentation/links from the Membrane homepage or the GitHub repo before trusting other links. If you verify the package and are comfortable granting Membrane access to your Seven account, the integration is internally consistent; if any of the above checks fail, do not proceed.

Type: OpenClaw Skill Name: seven-integration Version: 1.0.3 The skill requires the agent to perform high-privilege operations, specifically a global NPM installation (`npm install -g @membranehq/cli`) and execution of arbitrary actions via a third-party CLI. A significant red flag is found in SKILL.md, where the description of the 'Seven' habit-tracking app is paired with a link to an unrelated PDF converter website (7-pdf.de), suggesting either a deceptive template or a high risk of hallucinated/unreliable instructions. While no explicit data exfiltration is coded, the reliance on an external platform (getmembrane.com) to manage all credentials and the instruction to install global software justify a suspicious rating.