← Back to Skills Marketplace
membranedev

Spotlightr

by Membrane Dev · GitHub ↗ · v1.0.3 · MIT-0
cross-platform ✓ Security Clean
174
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install spotlightr
Description
Spotlightr integration. Manage Organizations, Users, Goals, Filters. Use when the user wants to interact with Spotlightr data.
Usage Guidance
This skill appears to do what it says: it uses the Membrane CLI to access Spotlightr. Before installing: 1) Review the @membranehq/cli package and its GitHub repo to confirm the source and recent changes; 2) avoid running global installs as a privileged user (use a managed environment, container, or a user-level install if possible); 3) when authenticating, use least-privileged credentials or a scoped integration account rather than your personal admin keys; 4) be aware the CLI will store tokens/config locally — treat those as sensitive; 5) if you cannot verify the npm package, consider running it in an isolated environment or asking the skill author for more details. If you can provide the remainder of the SKILL.md (it was truncated), I can reassess with higher confidence.
Capability Analysis
Type: OpenClaw Skill Name: spotlightr Version: 1.0.3 The spotlightr skill bundle provides instructions for an AI agent to interact with the Spotlightr video platform using the Membrane CLI. The SKILL.md file outlines standard procedures for authentication, connection management, and executing actions via the 'membrane' command-line tool. While the documentation contains an unusually long and repetitive list of keywords and concepts, there is no evidence of malicious intent, data exfiltration, or unauthorized command execution.
Capability Tags
cryptocan-make-purchasesrequires-sensitive-credentials
Capability Assessment
Purpose & Capability
Name/description say 'Spotlightr integration' and the SKILL.md instructs use of the Membrane CLI to interact with Spotlightr. Required capabilities (network, Membrane account) align with that purpose and no unrelated secrets or binaries are requested.
Instruction Scope
The instructions direct the user/agent to install and run the @membranehq CLI and to authenticate via Membrane (the file is truncated but visible steps show a login command). This stays within the scope of talking to Spotlightr, but it gives the CLI control over auth flows and will cause credential material to be handled/stored by that CLI (not by the skill). No instructions were observed that ask the agent to read unrelated local files or exfiltrate data to unknown endpoints.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but SKILL.md tells users to run 'npm install -g @membranehq/cli@latest'. Installing an npm CLI globally is a common pattern but has moderate risk: npm packages can run install scripts and a global install writes binaries to disk and alters PATH. The source referenced (membrane) appears legitimate, but users should verify the published package and its repository before installing.
Credentials
The skill declares no required environment variables or credentials in the registry metadata. It does require a Membrane account and the CLI's authentication flow (interactive or token-based), which is proportionate for a service integration. Be aware that authentication will likely grant the CLI access to Spotlightr data and the CLI may persist tokens locally.
Persistence & Privilege
Skill flags do not request always:true and the skill is user-invocable only. However, following the SKILL.md will install a persistent CLI binary and will cause the CLI to persist auth tokens/config on disk — this is expected for a CLI integration but is a persistence risk to consider outside the skill itself.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install spotlightr
  3. After installation, invoke the skill by name or use /spotlightr
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
Auto sync from membranedev/application-skills
v1.0.2
Revert refresh marker
v1.0.1
Refresh update marker
v1.0.0
Auto sync from membranedev/application-skills
Metadata
Slug spotlightr
Version 1.0.3
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 4
Frequently Asked Questions

What is Spotlightr?

Spotlightr integration. Manage Organizations, Users, Goals, Filters. Use when the user wants to interact with Spotlightr data. It is an AI Agent Skill for Claude Code / OpenClaw, with 174 downloads so far.

How do I install Spotlightr?

Run "/install spotlightr" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Spotlightr free?

Yes, Spotlightr is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Spotlightr support?

Spotlightr is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Spotlightr?

It is built and maintained by Membrane Dev (@membranedev); the current version is v1.0.3.

💬 Comments