Specific

Specific integration. Manage data, records, and automate workflows. Use when the user wants to interact with Specific data.

This skill appears to be a Membrane-based connector for 'Specific' and is mostly coherent, but the documentation looks partially unfinished (placeholder text and an unrelated MDN 'eval' link). Before installing: 1) Verify the Membrane CLI package (@membranehq/cli) and homepage (getmembrane.com / referenced GitHub repo) are legitimate and match the vendor. 2) Prefer running via npx for one-off use or in an isolated environment rather than doing a global 'npm -g' install. 3) Confirm what 'connectorKey specific' refers to and that you want to grant the Membrane service access to the target account. 4) Ask the skill author or publisher to remove the placeholder text and explain the MDN eval link (it appears unrelated). If those checks are satisfactory, the risk is typical for an integration that directs you to install and use a third-party CLI; if you cannot validate the package/repo, do not install the CLI or run commands.

Type: OpenClaw Skill Name: specific Version: 1.0.3 The skill provides instructions for an AI agent to install and use the Membrane CLI (@membranehq/cli) to manage external integrations and execute remote actions. It is classified as suspicious because it encourages high-risk patterns, such as global NPM installations and the construction of shell commands using JSON inputs (e.g., in `membrane action run`), which could lead to shell injection vulnerabilities if the agent does not properly sanitize user-provided data. Furthermore, the SKILL.md file contains placeholder text and a non-sequitur link to MDN's 'eval' documentation, suggesting the skill is either a poorly vetted template or lacks necessary security guardrails for command execution.