Summit

Summit integration. Manage Organizations, Pipelines, Users, Goals, Filters. Use when the user wants to interact with Summit data.

This skill appears to do what it says: it uses the Membrane CLI to integrate with Summit. Before installing or running it, consider: (1) npx @membranehq/cli@latest will download and execute code from the npm registry each time — prefer pinning to a specific version if you want a reproducible, auditable binary. (2) The CLI stores credentials at ~/.membrane/credentials.json; check file permissions and be comfortable with tokens being persisted locally. (3) Membrane acts as a proxy and will see any proxied requests and their headers/bodies — do not send sensitive secrets or unrelated system data through it unless you trust Membrane. (4) In headless or shared environments, be cautious with the browser-login flow and copy/paste auth codes securely. If you need more assurance, review @membranehq/cli source and the Membrane privacy/security docs or run the CLI in an isolated environment (container or dedicated service account).

Type: OpenClaw Skill Name: summit Version: 1.0.0 The skill bundle provides instructions for an AI agent to interact with the Summit project management platform via the Membrane CLI (@membranehq/cli). It outlines standard procedures for authentication, connection management, and API interaction (action discovery and proxy requests). No evidence of malicious intent, data exfiltration, or prompt injection was found; the logic is consistent with its stated purpose of managing Summit data through a legitimate integration platform.