Stackshare

StackShare integration. Manage Stacks, Companies, Projects, Users. Use when the user wants to interact with StackShare data.

Before installing or using this skill: - Note the mismatch: the registry metadata lists no required binaries, but the instructions require installing the Membrane CLI and a Membrane account. Ask the skill author to update metadata to declare the `membrane` CLI and network access requirement. - Verify the trustworthiness of Membrane (@membranehq) and the links provided (homepage and repository). Read Membrane's privacy/security docs to understand how it stores and uses connection credentials. - Prefer using `npx @membranehq/cli@latest` (no global install) if you want to avoid a global npm package; if you must run `npm install -g`, avoid running as root and inspect the package (and its postinstall scripts) first. - Understand that the skill's workflow proxies arbitrary API requests through Membrane; using it requires trusting that service for authorization and data handling. - If you need a higher assurance level, request that the author add an explicit install spec and clear required-binaries/requirements to the registry entry and show exactly which StackShare scopes/actions the connector will request.

Type: OpenClaw Skill Name: stackshare Version: 1.0.2 The skill instructions in SKILL.md require the agent to perform high-risk actions, including installing a global npm package (@membranehq/cli), executing shell commands, and making network requests. While these actions are aligned with the stated purpose of integrating with StackShare via the Membrane platform, the reliance on shell execution and external network access constitutes a risky capability set. Additionally, the instructions for running actions with JSON input could lead to shell injection vulnerabilities if the agent fails to sanitize user-provided parameters.