Signiflow

SigniFlow integration. Manage data, records, and automate workflows. Use when the user wants to interact with SigniFlow data.

This skill delegates SigniFlow access to the Membrane service and CLI rather than asking the user for direct API keys. Before installing or using it, consider: 1) Trust: Membrane will manage your SigniFlow credentials—review Membrane's security/privacy policy and the @membranehq/cli GitHub repo. 2) Installation: prefer using npx or pin a specific CLI version rather than npm install -g @membranehq/cli@latest to reduce supply-chain risk. 3) Credentials: keep any one-time login codes private when completing headless login flows. 4) Least privilege: confirm the connector you create uses only the permissions you expect in SigniFlow. 5) Verify: if you need stronger assurance, inspect the Membrane CLI source or ask for an install spec in the registry metadata so required binaries/install steps are explicit.

Type: OpenClaw Skill Name: signiflow Version: 1.0.1 The skill instructs the agent to perform high-risk operations in SKILL.md, including the global installation of an NPM package (@membranehq/cli) and the execution of shell commands to interact with the SigniFlow API. The provided command templates for running actions with JSON input ('--input') are vulnerable to shell injection if the agent populates them with unsanitized user data. While these capabilities are aligned with the stated purpose of using the Membrane platform, they introduce significant security risks without explicit safeguards.