← Back to Skills Marketplace
Signiflow
by
Vlad Ursul
· GitHub ↗
· v1.0.1
· MIT-0
107
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install signiflow
Description
SigniFlow integration. Manage data, records, and automate workflows. Use when the user wants to interact with SigniFlow data.
Usage Guidance
This skill delegates SigniFlow access to the Membrane service and CLI rather than asking the user for direct API keys. Before installing or using it, consider: 1) Trust: Membrane will manage your SigniFlow credentials—review Membrane's security/privacy policy and the @membranehq/cli GitHub repo. 2) Installation: prefer using npx or pin a specific CLI version rather than npm install -g @membranehq/cli@latest to reduce supply-chain risk. 3) Credentials: keep any one-time login codes private when completing headless login flows. 4) Least privilege: confirm the connector you create uses only the permissions you expect in SigniFlow. 5) Verify: if you need stronger assurance, inspect the Membrane CLI source or ask for an install spec in the registry metadata so required binaries/install steps are explicit.
Capability Analysis
Type: OpenClaw Skill
Name: signiflow
Version: 1.0.1
The skill instructs the agent to perform high-risk operations in SKILL.md, including the global installation of an NPM package (@membranehq/cli) and the execution of shell commands to interact with the SigniFlow API. The provided command templates for running actions with JSON input ('--input') are vulnerable to shell injection if the agent populates them with unsanitized user data. While these capabilities are aligned with the stated purpose of using the Membrane platform, they introduce significant security risks without explicit safeguards.
Capability Assessment
Purpose & Capability
The skill declares itself as a SigniFlow integration and all runtime steps use the Membrane CLI to connect and run actions against SigniFlow, which is coherent. Small mismatch: registry metadata lists no required binaries even though the instructions require installing the Membrane CLI (npm install -g @membranehq/cli), so the declared 'required binaries' field is incomplete but explainable for an instruction-only skill.
Instruction Scope
SKILL.md limits runtime actions to installing/using the Membrane CLI, logging in, creating a connection, listing/creating/running Membrane actions and polling for results. It does not instruct reading arbitrary files, accessing unrelated env vars, or exfiltrating data to unexpected endpoints.
Install Mechanism
No formal install spec is present (instruction-only). The doc recommends installing @membranehq/cli from the public npm registry (npm install -g or npx usage is shown). This is a typical pattern but has the usual supply-chain considerations for npm packages (pin versions or review the package/repo).
Credentials
The skill requests no environment variables or direct credentials and explicitly instructs to let Membrane manage SigniFlow credentials via a connection. That is proportionate to its purpose; however using Membrane means the Membrane service will hold the SigniFlow access tokens, so trust in that service is required.
Persistence & Privilege
The skill is not always-enabled and is user-invocable. It does not request persistent agent-wide privileges or modify other skills' configs. The only persistence implied is installing the Membrane CLI (optional) on the host, which is a normal client-side install.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install signiflow - After installation, invoke the skill by name or use
/signiflow - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Auto sync from membranedev/application-skills
v1.0.0
Auto sync from membranedev/application-skills
Metadata
Frequently Asked Questions
What is Signiflow?
SigniFlow integration. Manage data, records, and automate workflows. Use when the user wants to interact with SigniFlow data. It is an AI Agent Skill for Claude Code / OpenClaw, with 107 downloads so far.
How do I install Signiflow?
Run "/install signiflow" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Signiflow free?
Yes, Signiflow is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Signiflow support?
Signiflow is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Signiflow?
It is built and maintained by Vlad Ursul (@gora050); the current version is v1.0.1.
More Skills