Sparkpost

SparkPost integration. Manage Campaigns, Templates. Use when the user wants to interact with SparkPost data.

This skill is internally consistent: it expects you to install and log into the Membrane CLI, then create a SparkPost connection through Membrane. Before installing, verify the @membranehq/cli npm package and the Membrane project (homepage/repo) so you trust the publisher. Be aware that npm -g installs can run arbitrary code during installation; consider auditing the package, installing in a container/VM, or using npx to avoid a global install. Understand that authentication happens via Membrane (browser-based login and server-side token storage), so you're trusting Membrane with SparkPost credentials — if you need self-hosted control or want to avoid third-party custody of secrets, do not proceed.

Type: OpenClaw Skill Name: sparkpost Version: 1.0.3 The skill instructs the AI agent to perform high-risk operations, including the global installation of a third-party CLI tool (`@membranehq/cli`) and the execution of commands for authentication and remote action management via the Membrane platform. While these steps are consistent with the stated goal of SparkPost integration, the requirement for global software installation and the delegation of credential management to an external service represent a significant security surface. No evidence of intentional malice or data exfiltration was identified in SKILL.md or _meta.json.