Tinypng

TinyPNG integration. Manage data, records, and automate workflows. Use when the user wants to interact with TinyPNG data.

This skill appears coherent: it uses the Membrane CLI to integrate with TinyPNG rather than requiring API keys directly. Before installing or following the SKILL.md: (1) verify you trust the vendor (getmembrane.com / @membranehq on npm and the GitHub repo) and review the CLI package README and published npm owner; (2) prefer using npx for one-off runs if you don't want a global install; (3) be aware membrane login stores/handles credentials—ensure you are comfortable with their auth/storage model; (4) do not enter unrelated secrets if prompted; (5) test in a limited environment first (non-production) to confirm behavior. If you need higher assurance, request provenance (who published this skill, link to the exact CLI release) or run the CLI install in an isolated environment to inspect its files.

Type: OpenClaw Skill Name: tinypng Version: 1.0.3 The skill acts as a wrapper for the Membrane CLI, instructing the agent to perform high-risk operations such as installing a global npm package (@membranehq/cli) and dynamically creating/executing actions via a remote service (membrane action create). While these capabilities are aligned with the stated purpose of integrating TinyPNG via the Membrane platform, the reliance on remote code generation and global system modifications constitutes a significant attack surface and high-risk behavior in an agentic environment.