Alight Solutions
v1.0.0Alight Solutions integration. Manage data, records, and automate workflows. Use when the user wants to interact with Alight Solutions data.
⭐ 0· 64·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description match the instructions: the skill is a guide for using the Membrane CLI to access Alight Solutions. One minor mismatch: the registry metadata lists no required binaries, but the SKILL.md assumes availability of Node/npm (or otherwise installing a CLI via npm or using npx).
Instruction Scope
The instructions stay within the stated purpose: installing/using the Membrane CLI, creating connections, listing/running actions, and proxying requests to the Alight API. There are no instructions to read unrelated files, access unrelated env vars, or exfiltrate data to unexpected endpoints.
Install Mechanism
No automated install spec is included (instruction-only). The SKILL.md recommends installing @membranehq/cli from the npm registry (npm install -g or npx), which is a typical, moderate-risk mechanism; users should confirm the package owner and integrity before installing global npm packages.
Credentials
The skill declares no required environment variables and explicitly recommends letting Membrane manage credentials rather than asking the user for API keys. It requires a Membrane account and network access, which are proportionate to the described functionality.
Persistence & Privilege
The skill does not request always: true, does not modify other skills or system-wide settings, and is user-invocable. It does not request persistent privileges beyond normal CLI usage.
Assessment
This skill is a documentation-only integration that tells you how to use the Membrane CLI to work with Alight Solutions. Before installing or using it: (1) confirm you trust @membranehq on the npm registry (verify publisher, package page, and repository activity) because the SKILL.md suggests a global npm install/npx; (2) be aware you'll need Node/npm or use npx, and installing global packages requires elevated privileges on some systems; (3) Membrane acts as a proxy and will see requests/responses for Alight data—ensure you are comfortable with Membrane's data handling, security, and privacy policies before connecting employee or sensitive data; (4) follow the SKILL.md steps rather than providing raw API keys locally (the skill recommends using Membrane-managed connections). The skill appears coherent with its stated purpose, but validate the third-party CLI before giving it access to your environment or data.Like a lobster shell, security has layers — review code before you run it.
latestvk97b4ejvpjsjdnddagvhykpws1848vh0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.