Whitehat Security

WhiteHat Security integration. Manage data, records, and automate workflows. Use when the user wants to interact with WhiteHat Security data.

This skill appears internally consistent, but follow these precautions before installing or using it: 1) Verify you trust the @membranehq package on npm (check the publisher, npm page, and GitHub repo) before running a global install; consider using a container or isolated environment. 2) Use the Membrane-hosted OAuth flow rather than giving API keys directly (the skill recommends this). 3) Confirm what WhiteHat permissions the connector requests (prefer least privilege / read-only where possible). 4) If you have sensitive production data, review Membrane's privacy, data handling and retention policies and the connector's scope before connecting. 5) If anything in the published repository or package looks different from the SKILL.md guidance, pause and investigate—source is listed as unknown in the registry metadata.

Type: OpenClaw Skill Name: whitehat-security Version: 1.0.3 The skill requires the installation of a global npm package (@membranehq/cli) and delegates all authentication and API interactions to the Membrane SaaS platform. While these actions are aligned with the stated purpose of integrating WhiteHat Security, the reliance on an external CLI for shell execution and a third-party service for credential management constitutes a high-privilege dependency. No evidence of intentional malice or data exfiltration was found in SKILL.md or _meta.json.