Ably Realtime
v1.0.0Ably Realtime integration. Manage data, records, and automate workflows. Use when the user wants to interact with Ably Realtime data.
⭐ 0· 30·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (Ably Realtime integration) matches the runtime instructions: all actions are performed via the Membrane CLI and Membrane connections to Ably. Required capabilities (network access, Membrane account) are appropriate for this purpose.
Instruction Scope
SKILL.md stays within the stated scope: it guides the agent to install and use the Membrane CLI, create/list connections, run actions, and proxy requests to Ably through Membrane. It does not instruct reading unrelated local files or requesting unrelated credentials.
Install Mechanism
There is no install spec in the registry, but the SKILL.md instructs users to run 'npm install -g @membranehq/cli' and uses 'npx ...@latest' which will fetch code from the public npm registry. This is common but means remote package code will be executed on install; the skill did not declare a required 'npm'/'node' binary in metadata (operational gap).
Credentials
The skill declares no required environment variables or secrets and explicitly recommends letting Membrane manage credentials. The authentication flow is browser-based via Membrane rather than asking for API keys locally — this is proportionate to its purpose.
Persistence & Privilege
The skill does not request always-on presence or system config access. It's user-invocable and allows normal autonomous invocation (default), which is expected. There is no indication it modifies other skills or system-wide settings.
Assessment
This skill appears to be what it says: an Ably integration that uses the Membrane CLI. Before installing, ensure you have Node/npm available (the SKILL.md assumes it but the registry metadata does not declare it). Installing the Membrane CLI and using npx will fetch and run code from the npm registry — verify you trust @membranehq and the package versions (consider auditing the package or pinning a vetted version). Be aware that you will authenticate via a browser to Membrane (server-side auth), and subsequent commands will proxy requests through Membrane. If you need tighter control, test the CLI in a sandbox or review the Membrane CLI source before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk971vqrvpj7t1jqpsjwrb5g2yx849kzb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.