4Demit
v1.0.04dem.It integration. Manage data, records, and automate workflows. Use when the user wants to interact with 4dem.It data.
⭐ 0· 65·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name and description match the runtime instructions (it uses Membrane to manage 4dem.It data). However the registry metadata declares no required binaries while the SKILL.md instructs installing and running the Membrane CLI via npm/npx, which implies Node/npm must be present — that dependency is not declared in the manifest.
Instruction Scope
SKILL.md focuses on installing and using the Membrane CLI, creating connections, listing/running actions, and proxying requests to the 4dem.It API. It does not instruct the agent to read unrelated files or exfiltrate credentials and explicitly advises not to ask users for API keys.
Install Mechanism
The skill is instruction-only (no install spec). It recommends installing @membranehq/cli globally via npm and demonstrates npx usage. Global npm installs will write to disk and can run install scripts; the package appears to be an official Membrane CLI, but the skill does not include an install spec or verify the install source in the manifest.
Credentials
The manifest requests no environment variables or credentials. SKILL.md relies on Membrane's browser-based login flow and server-side credential management rather than local secrets, which is proportionate to the integration purpose.
Persistence & Privilege
The skill does not request always:true and is not force-included. There is no instruction to modify other skills' configs or system-wide agent settings beyond normal CLI installation and connection creation.
Assessment
This skill is basically a how-to for using the Membrane CLI to talk to 4dem.It and looks coherent with that purpose. Before you install/use it: (1) ensure you have Node/npm available — the SKILL.md assumes npm/npx but the manifest doesn't declare them; (2) verify you trust Membrane (https://getmembrane.com and the @membranehq/cli package) because the CLI will manage authentication and proxy requests to 4dem.It and therefore will handle your account tokens; (3) prefer installing/testing the CLI in an isolated environment (container or VM) if you are unsure about global npm installs; and (4) confirm the connector ID and actions you run are what you expect (the membrane request proxy will send arbitrary requests to the 4dem.It API).Like a lobster shell, security has layers — review code before you run it.
latestvk972japsh9h9k4jg0ybbb319nn845gbg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.