Mav

Mav integration. Manage data, records, and automate workflows. Use when the user wants to interact with Mav data.

This skill appears to be a Membrane-based integration for a marketing tool and mostly behaves as described, but there are small red flags (an unrelated "Official docs" link to the MAVLink SDK) that look like documentation copy/paste. Before installing/using: 1) Verify the skill source (homepage/repo) and that getmembrane.com and the GitHub repository belong to the vendor you expect. 2) Be cautious about running `npm install -g` as it writes to your system and can require elevated privileges—prefer using npx if you want to avoid a global install. 3) Expect the CLI to open a browser or print an auth URL and to handle credentials server-side; do not share API keys locally. 4) If you need higher assurance, ask the publisher for a corrected SKILL.md or a release tag pointing to the CLI binary and validate the repository contents. If you rely on this for sensitive data, obtain more provenance (signed releases or an official vendor statement) before granting access.

Type: OpenClaw Skill Name: mav Version: 1.0.1 The skill instructs the agent to install a global NPM package (@membranehq/cli) and execute remotely-generated actions, which introduces supply chain and remote code execution risks. A significant discrepancy exists in SKILL.md, where the tool is described as a marketing automation platform but provides documentation links for MAVLink (a drone communication protocol at mavsdk.mavlink.io), creating a high risk of functional confusion or unintended command execution in sensitive environments.