Srxp

SRXP integration. Manage data, records, and automate workflows. Use when the user wants to interact with SRXP data.

This skill appears to do what it says: it uses Membrane's CLI to connect to SRXP. Before installing or running: 1) Verify the @membranehq/cli package is the official package (check the publisher and package homepage) or use npx to avoid a global install. 2) Expect to authenticate via your browser (the skill uses Membrane's login flow); do not paste secrets into chat. 3) Confirm you are comfortable granting the Membrane account access to SRXP data (Membrane acts as the proxy and stores credentials server-side). 4) Note the small metadata mismatch: the skill's registry entry doesn't list the Membrane CLI or network access as requirements even though SKILL.md requires them — treat that as an administrative/packaging oversight, not a functional red flag.

Type: OpenClaw Skill Name: srxp Version: 1.0.0 The skill bundle requires high-risk operations, specifically a global NPM installation (`npm install -g @membranehq/cli`) and the execution of a third-party CLI for authentication and network requests. While these actions are plausibly necessary for the stated purpose of SRXP integration via the Membrane platform, the requirement for global system modification and broad shell/network access constitutes a significant attack surface. Additionally, the `publishedAt` timestamp in `_meta.json` (1775178341604) is set in the future (2026), which is an anomaly. No clear evidence of intentional malice or data exfiltration was found in SKILL.md.