Scrapinghub

Scrapinghub integration. Manage data, records, and automate workflows. Use when the user wants to interact with Scrapinghub data.

This skill appears to do what it says: it instructs you to use the Membrane CLI to connect to Scrapinghub and run actions. Before installing or running anything, verify the @membranehq package on npm (check the publisher, package repository and recent release notes) and prefer a pinned version rather than `@latest` or unverified `npx` runs. Understand that creating a connection will grant Membrane access to your Scrapinghub account data (tokens/credentials are managed server-side by Membrane), so review Membrane's privacy/security docs and the connector's permissions. If you are using headless or automated agents, be careful when following the browser/code-based login flow (do not paste codes into untrusted UIs). If you do not trust the Membrane project or cannot review the package, do not install the CLI or run the provided npx commands.

Type: OpenClaw Skill Name: scrapinghub Version: 1.0.1 The skill requires the AI agent to perform high-risk operations including the global installation of an npm package (@membranehq/cli) and the execution of various shell commands for authentication and data management. While these capabilities are plausibly needed for the stated purpose of integrating with the Membrane platform and Scrapinghub, the instructions in SKILL.md encourage the construction of shell commands using potentially unsanitized inputs (e.g., action IDs and JSON payloads), which presents a risk of command injection. Additionally, the skill relies on external network access to getmembrane.com for its core functionality.