← Back to Skills Marketplace
Spiff
by
Membrane Dev
· GitHub ↗
· v1.0.1
· MIT-0
98
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install spiff
Description
Spiff integration. Manage data, records, and automate workflows. Use when the user wants to interact with Spiff data.
Usage Guidance
This skill appears internally consistent: it delegates all auth and API work to the Membrane service and instructs you to install/run the official Membrane CLI. Before installing or using it, consider the following: 1) Trust: using the skill means granting Membrane (a third party) access to your Spiff data — review Membrane's privacy/security practices and the @membranehq npm package. 2) Installation: the SKILL.md suggests npm -g install which may require admin permissions; use npx to avoid global installs if you prefer. 3) Autonomy: the agent can invoke the skill autonomously and perform actions through your Membrane connection once you authenticate — limit or monitor agent privileges if you want to avoid automated changes. 4) Verify sources: confirm the CLI package/org and homepage (getmembrane.com and the listed GitHub repo) match your expectations before running install or login commands.
Capability Analysis
Type: OpenClaw Skill
Name: spiff
Version: 1.0.1
The skill requires high-risk operations including the global installation of an npm package (@membranehq/cli) and the execution of CLI commands that incorporate JSON-formatted parameters, which poses a risk of shell injection if inputs are not properly sanitized by the agent. Furthermore, the instructions in SKILL.md direct the agent to route all external communications and authentication through a third-party platform (getmembrane.com), which centralizes sensitive access. While these actions are aligned with the stated purpose of Spiff integration, they constitute risky capabilities without explicit malicious intent.
Capability Assessment
Purpose & Capability
The skill claims to integrate with Spiff and its SKILL.md consistently instructs the agent to use the Membrane CLI to manage Spiff connections, discover actions, and run them. The requested actions and tooling match the stated purpose (no unrelated credentials, binaries, or system paths are required).
Instruction Scope
Instructions are limited to installing/using the Membrane CLI, authenticating via Membrane, creating/listing connections, discovering and running actions, and polling build status. The instructions do not ask the agent to read arbitrary files, environment variables, or system configurations beyond performing network authentication and CLI usage.
Install Mechanism
There is no formal install spec in the registry (skill is instruction-only). The docs recommend installing @membranehq/cli via npm -g or using npx. Installing a global npm package requires elevated permissions on some systems and introduces the usual supply-chain considerations for npm packages; however, the package is from a named org (@membranehq) and no arbitrary URL downloads are suggested.
Credentials
The skill does not request environment variables or credentials directly; it relies on Membrane to manage auth. This is proportionate to the stated purpose, but it does centralize trust in Membrane — the Membrane service will hold credentials/access to your Spiff account, so you should evaluate and trust that third party before proceeding.
Persistence & Privilege
The skill is not always-enabled and does not request system-wide persistence or access to other skills' configuration. It allows normal autonomous invocation (disable-model-invocation is false), which is expected for skills; be aware autonomous runs would let the agent perform actions via your Membrane connection once authorized.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install spiff - After installation, invoke the skill by name or use
/spiff - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Auto sync from membranedev/application-skills
v1.0.0
Auto sync from membranedev/application-skills
Metadata
Frequently Asked Questions
What is Spiff?
Spiff integration. Manage data, records, and automate workflows. Use when the user wants to interact with Spiff data. It is an AI Agent Skill for Claude Code / OpenClaw, with 98 downloads so far.
How do I install Spiff?
Run "/install spiff" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Spiff free?
Yes, Spiff is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Spiff support?
Spiff is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Spiff?
It is built and maintained by Membrane Dev (@membranedev); the current version is v1.0.1.
More Skills