Airparser
v1.0.2Airparser integration. Manage data, records, and automate workflows. Use when the user wants to interact with Airparser data.
⭐ 0· 122·1 current·1 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is an Airparser integration and all runtime instructions center on using the Membrane CLI to discover/connect/run Airparser actions. Requiring the Membrane CLI (via SKILL.md) is proportional to the described functionality; there are no unrelated credentials, binaries, or config paths requested.
Instruction Scope
The SKILL.md tells the agent/operator to install and run the Membrane CLI, run commands that open a browser-based login flow, create connections, run proxied requests, and upload documents. These instructions stay within the scope of interacting with Airparser via Membrane, but they do imply that document contents and request payloads will be routed through Membrane's service — users should be aware that data is sent to Membrane (and then to Airparser) during normal use.
Install Mechanism
This is an instruction-only skill (no install spec in registry), but SKILL.md tells users to run `npm install -g @membranehq/cli`. That is a reasonable, common step but does execute third-party code from npm and installs a global binary. It's not inherently suspicious, but users should confirm they trust the @membranehq package source or use non-global alternatives (npx, container) if they prefer.
Credentials
The skill declares no required environment variables or credentials; the SKILL.md explicitly instructs not to ask users for API keys and to let Membrane handle auth. This is consistent and proportionate to the stated purpose. Authentication is handled via browser login and server-side token management.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and has no install-time persistence specified. It is user-invocable and allows normal autonomous model invocation (platform default) which is expected for an integration skill.
Assessment
This skill is coherent: it instructs you to use the Membrane CLI as a proxy to Airparser and does not request local secrets. Before installing/using it, verify you trust the @membranehq npm package and the Membrane service because documents and parsed data will be routed through Membrane (and then Airparser). If you have sensitive documents, review Membrane's privacy/security policies or consider running actions in a controlled environment (container/VM) or using npx instead of a global npm install. If you need stronger guarantees about where data goes, confirm whether Membrane stores or logs document contents and for how long.Like a lobster shell, security has layers — review code before you run it.
latestvk979ad1df9qmvzjwardkbwsk4x843whx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.