Qualys

Qualys integration. Manage data, records, and automate workflows. Use when the user wants to interact with Qualys data.

This skill appears to do what it says: use Membrane to talk to Qualys. Before installing/using it: (1) verify the @membranehq/cli npm package source and maintainer (npm page, audit, version history); (2) be aware that using it grants Membrane access to your Qualys account — review Membrane's security/privacy and limit scope/privileges on the Qualys side if possible; (3) prefer using npx for one‑off commands if you don't want a global install; (4) try this in a test account first and avoid granting production‑level privileges until you trust the connector; (5) if you need an offline or on‑prem solution that never sends metadata to a third party, this skill is not suitable.

Type: OpenClaw Skill Name: qualys Version: 1.0.3 The skill instructions in SKILL.md direct the agent to install a global npm package (@membranehq/cli) and execute shell commands to interact with the Membrane platform for Qualys integration. While these actions are aligned with the stated purpose, the requirement for global software installation, shell-based command execution, and the delegation of authentication and action logic to a third-party service (getmembrane.com) constitute high-risk capabilities. The skill also describes dynamic action creation and execution, which involves running remotely generated logic, though no evidence of intentional malice or data exfiltration was identified.