Shotstack

Shotstack integration. Manage Deals, Persons, Organizations, Leads, Projects, Pipelines and more. Use when the user wants to interact with Shotstack data.

This skill is suspicious mainly because the registry description (mentions Deals/Persons/Pipelines) does not match the SKILL.md content (which documents using Membrane to talk to Shotstack, a video API). Before installing or using it: 1) Verify the publisher/source (check the referenced GitHub repo and the @membranehq npm package contents and reputation). 2) If you must install the CLI, review the npm package code or its repository before running `npm install -g` (global installs run code on your machine). 3) Confirm you are comfortable trusting Membrane to manage Shotstack credentials (the skill relies on their server-side auth). 4) Avoid providing unrelated credentials and ask the publisher to fix the description mismatch — if the mismatch isn't explained, treat the skill as potentially misconfigured or published in error.

Type: OpenClaw Skill Name: shotstack Version: 1.0.3 The skill exhibits a significant metadata discrepancy in SKILL.md, where the description refers to CRM entities (Deals, Persons, Organizations) while the tool is intended for Shotstack (video editing). It instructs the agent to perform high-privilege operations, including the global installation of an npm package (@membranehq/cli) and the execution of CLI commands for authentication and dynamic action creation. While these behaviors are consistent with the Membrane platform's workflow, the combination of documentation errors and the requirement for broad shell execution capabilities warrants a suspicious classification.