Purple Sonar

Purple Sonar integration. Manage Organizations. Use when the user wants to interact with Purple Sonar data.

This skill appears to be what it says: an integration that uses the Membrane CLI to access Purple Sonar. Before installing or using it, consider: (1) Verify the @membranehq/cli package publisher and prefer using npx or pinning a specific version rather than 'npm install -g ...@latest' to reduce supply-chain risk. (2) Understand that logging in and creating a 'connection' hands access to your Purple Sonar data to the Membrane service — review Membrane's privacy/security documentation and permissions. (3) In headless or automated environments, follow the documented headless login flow carefully; do not paste unrelated secrets into the CLI. (4) After creating actions/connections, review what data the actions expose and any webhooks or outputs they produce. If you need higher assurance, ask the skill author for a signed manifest, a fixed CLI package version, or use Membrane docs and repository to confirm behavior. Because this is an instruction-only skill with no code to inspect, confidence is medium — additional assurance would come from confirming the CLI package and the Membrane service privacy/security posture.

Type: OpenClaw Skill Name: purple-sonar Version: 1.0.3 The skill bundle provides instructions for an AI agent to interface with Purple Sonar using the Membrane CLI. It follows security best practices by delegating authentication to a dedicated CLI tool rather than handling raw API keys. While the documentation in SKILL.md contains a placeholder LLM refusal message ('I don't have enough information to do that'), the functional commands and logic are consistent with its stated purpose of managing service integrations via the @membranehq/cli npm package.