Uchat

Uchat integration. Manage data, records, and automate workflows. Use when the user wants to interact with Uchat data.

This skill appears coherent, but consider these practical precautions before installing/using it: - Trust the vendor: installing @membranehq/cli from npm will run code on your machine. Review the package page and the project's GitHub (https://github.com/membranedev/application-skills) and confirm you trust Membrane/getmembrane.com. - Review what data is shared: using the CLI means Membrane acts as an intermediary for Uchat API calls. Check Membrane's privacy/security docs to understand what data is sent to their servers and how long tokens persist. - Minimize blast radius: if possible, use a dedicated Membrane/Membrane-connected Uchat account or limited-permission Uchat credentials when testing. - Inspect local credential storage: the CLI will store auth state locally — find where (e.g., ~/.config or similar) and understand token lifetime and how to revoke access. - If you need extra assurance, install the CLI in a sandbox/container or run via npx (avoids global install) and review the CLI source code and recent releases on GitHub. If you want, I can (1) show the npm package page and repo for @membranehq/cli, (2) point to docs describing where the CLI stores tokens, or (3) outline a minimal test workflow to verify behavior in a contained environment.

Type: OpenClaw Skill Name: uchat Version: 1.0.1 The uchat skill is a set of instructions for an AI agent to interact with the Uchat platform via the Membrane CLI. It guides the agent through legitimate processes such as authentication, connection management, and action execution using the '@membranehq/cli' tool. There is no evidence of malicious intent, data exfiltration, or unauthorized command execution; the instructions prioritize secure credential handling through the Membrane platform rather than local storage.