Turbot Pipes

Turbot Pipes integration. Manage data, records, and automate workflows. Use when the user wants to interact with Turbot Pipes data.

This skill appears coherent: it uses the Membrane CLI to talk to Turbot Pipes and asks for a Membrane account. Before installing or using it: 1) Verify you trust the @membranehq/cli package and the publisher (review the npm package page and the GitHub repo) and prefer pinning to a known good version instead of using @latest. 2) Install in an isolated environment if you are concerned about npm postinstall scripts. 3) When creating a Membrane connection to Turbot/Turbot Pipes, restrict the connection's permissions/scopes to the minimum needed — actions invoked through the CLI can modify resources. 4) Confirm the Membrane service’s privacy/hosting model (where credentials are stored and what access Membrane has). If you need, ask the skill owner for the exact CLI version and the repository commit hash they expect you to use.

Type: OpenClaw Skill Name: turbot-pipes Version: 1.0.1 The skill bundle facilitates integration with Turbot Pipes via the Membrane CLI, which requires global npm installation and network access. It is classified as suspicious due to risky capabilities including shell command execution and the potential for shell injection vulnerabilities in the provided command templates (SKILL.md), as well as reliance on a third-party platform for authentication and action execution.