← Back to Skills Marketplace
Webmerge
by
Membrane Dev
· GitHub ↗
· v1.0.1
· MIT-0
115
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install webmerge
Description
WebMerge integration. Manage data, records, and automate workflows. Use when the user wants to interact with WebMerge data.
Usage Guidance
This skill delegates WebMerge access to the Membrane service and uses the Membrane CLI. Before installing: (1) verify the @membranehq npm package and prefer npx or pin a specific version instead of `-g @latest`; (2) confirm you trust Membrane (it will hold/mediate your WebMerge credentials); (3) perform CLI installs in a controlled environment (or use a container/VM) if you are cautious; and (4) review Membrane's privacy/security docs and your organization's policies before granting access.
Capability Analysis
Type: OpenClaw Skill
Name: webmerge
Version: 1.0.1
The skill instructions in SKILL.md direct the AI agent to perform high-risk operations, including a global NPM installation (@membranehq/cli) and the execution of shell commands that incorporate potentially unsanitized parameters (e.g., actionId and input JSON). This pattern introduces a shell injection vulnerability if the agent processes malicious user input. While these capabilities are aligned with the stated purpose of integrating WebMerge via the Membrane CLI, the reliance on shell execution and network access meets the criteria for a suspicious classification.
Capability Assessment
Purpose & Capability
The name and description (WebMerge integration) match the instructions: the skill uses the Membrane CLI to connect to WebMerge and run actions. Requiring a Membrane account and network access is coherent with the stated purpose.
Instruction Scope
SKILL.md only instructs installing and using the Membrane CLI, authenticating interactively, creating a connection to the WebMerge connector, discovering actions, and running them. It does not ask the agent to read unrelated files, exfiltrate data, or access unrelated environment variables.
Install Mechanism
The skill is instruction-only and asks users to run `npm install -g @membranehq/cli@latest` (or use npx). Installing a global npm package is a moderate-risk operation because it writes to disk and executes third-party code; however the package is in the @membranehq namespace (consistent with the skill) and use of the CLI is expected for this integration. Recommend pinning versions or using npx to avoid global installs when possible.
Credentials
No environment variables or local secrets are requested by the skill; authentication is delegated to Membrane via interactive login. This is proportionate, but it means Membrane (an external service) will hold/mediate your WebMerge credentials — users should verify they trust Membrane and review its privacy/security practices.
Persistence & Privilege
The skill does not request always:true, does not declare system-wide config changes, and is user-invocable only. There is no evidence it modifies other skills or requires elevated persistent privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install webmerge - After installation, invoke the skill by name or use
/webmerge - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Auto sync from membranedev/application-skills
v1.0.0
Auto sync from membranedev/application-skills
Metadata
Frequently Asked Questions
What is Webmerge?
WebMerge integration. Manage data, records, and automate workflows. Use when the user wants to interact with WebMerge data. It is an AI Agent Skill for Claude Code / OpenClaw, with 115 downloads so far.
How do I install Webmerge?
Run "/install webmerge" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Webmerge free?
Yes, Webmerge is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Webmerge support?
Webmerge is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Webmerge?
It is built and maintained by Membrane Dev (@membranedev); the current version is v1.0.1.
More Skills