Affinda
v1.0.2Affinda integration. Manage data, records, and automate workflows. Use when the user wants to interact with Affinda data.
⭐ 0· 101·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Skill name/description (Affinda integration) match the instructions: all actions are performed via the Membrane CLI and a Membrane account. The homepage and repository references point to the Membrane project, which is coherent with the stated purpose.
Instruction Scope
SKILL.md only directs installing/using the Membrane CLI, creating connections, listing/running actions, and proxying API requests through Membrane. It does not instruct reading unrelated files/paths or exporting secrets and explicitly advises not to ask users for API keys.
Install Mechanism
There is no platform install spec (this is instruction-only), but the document tells users to run `npm install -g @membranehq/cli`. Installing a global npm package is a common pattern but does require trusting that npm package and its maintainer; the skill itself does not automatically install anything.
Credentials
No environment variables, credential envs, or config paths are requested. The only requirement is a network connection and a Membrane account, which is proportional to the integration's needs. The skill explicitly recommends letting Membrane manage credentials.
Persistence & Privilege
always:false (not force-included), user-invocable:true, and normal autonomous invocation is allowed (disable-model-invocation:false). The skill does not request elevated or persistent system privileges and does not modify other skills or system-wide settings.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to interact with Affinda. Before installing or using it: (1) verify you trust the Membrane CLI npm package (@membranehq/cli) and the publisher (review the npm package page and GitHub repo), (2) be aware the workflow requires a Membrane account and browser-based login that grants Membrane access to Affinda on your behalf—review the permissions/scope of that connection, (3) because the SKILL.md tells you to install a global npm package manually, the platform will not install it for you—only install if you trust the package, and (4) if you do not want the agent to act autonomously with your Membrane account, disable autonomous skill invocation in your agent settings. Overall the skill is coherent and proportional to its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk97ax2c40vxbzvszgbreb4nfcn8427md
License
MIT-0
Free to use, modify, and redistribute. No attribution required.