Sourcegraph

Sourcegraph integration. Manage data, records, and automate workflows. Use when the user wants to interact with Sourcegraph data.

This skill appears coherent and works by having you install and use the Membrane CLI to connect to Sourcegraph. Before installing: (1) verify you trust Membrane (getmembrane.com and the @membranehq npm package) because the service will hold Sourcegraph access on your behalf; (2) prefer using npx or pin a known package version rather than an unpinned global install; (3) inspect the npm package and the GitHub repository (https://github.com/membranedev/application-skills) if you can, and review Membrane's privacy/security docs to understand what account permissions are granted; (4) do not paste Sourcegraph credentials into third-party places—use the provided connect/login flows; (5) run installations as a non-root user or in an isolated environment if you are cautious.

Type: OpenClaw Skill Name: sourcegraph Version: 1.0.1 The skill bundle provides a standard integration for Sourcegraph using the Membrane CLI. The instructions in SKILL.md guide the AI agent on how to authenticate, search for actions, and execute queries through the Membrane platform, which acts as a proxy to manage credentials securely. No evidence of data exfiltration, malicious payloads, or harmful prompt injection was found; the instructions actually include security best practices such as advising the agent not to request raw API keys from the user.