Waitlist

Waitlist integration. Manage data, records, and automate workflows. Use when the user wants to interact with Waitlist data.

This skill appears coherent with its purpose, but before installing or running anything: (1) verify the npm package '@membranehq/cli' (maintainer, version, and reviews) rather than blindly installing latest; (2) be aware a global npm install will modify your system PATH — consider installing in a controlled environment or container; (3) understand that Membrane is a third-party SaaS that will manage auth and therefore will have access to your Waitlist data once you connect — review their privacy/security docs and the connection flow; (4) prefer pinned versions (not @latest) in production and inspect CLI output before allowing any automated agent to invoke it; (5) there's no evidence the skill asks for unrelated secrets or file access, but because this is instruction-only (no code bundled), the actual runtime behavior depends on the Membrane CLI you install.

Type: OpenClaw Skill Name: waitlist Version: 1.0.3 The skill instructions in `SKILL.md` require the agent to perform high-risk actions, including global installation of a third-party CLI tool (`npm install -g @membranehq/cli`) and the execution of shell commands that incorporate user-provided strings (e.g., `intent`, `description`, and JSON `input`). These patterns introduce a risk of shell injection vulnerabilities. While these capabilities are plausibly needed for the stated purpose of integrating with the Waitlist service via the Membrane platform (https://getmembrane.com), the combination of shell execution, network access, and global package installation meets the criteria for a suspicious classification due to the inherent security risks in an automated agent context.