Altoviz
v1.0.2Altoviz integration. Manage data, records, and automate workflows. Use when the user wants to interact with Altoviz data.
⭐ 0· 105·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Altoviz integration) matches the instructions: all runtime actions are calls to the Membrane CLI to discover connectors, create connections, run actions, or proxy requests to Altoviz. No unrelated services, env vars, or binaries are requested.
Instruction Scope
SKILL.md is focused on installing and using @membranehq/cli and the membrane command set (login, connect, action list/run, request). It does not instruct the agent to read arbitrary local files or environment variables. Note: runtime use involves opening a browser OAuth flow and proxying requests through Membrane (so Altoviz data will transit Membrane).
Install Mechanism
This is an instruction-only skill that tells users to run 'npm install -g @membranehq/cli' — a standard approach but it requires installing a global npm package. This is a moderate-risk operation compared with zero-install skills (writes files to disk and modifies PATH), but it is proportionate for a CLI-based integration and the package is from the public npm registry.
Credentials
The skill requests no local env vars or secrets and explicitly says Membrane handles auth server-side. That is proportionate, but it means Membrane (its service and account) will hold and mediate credentials and see proxied API traffic — verify you are comfortable with that trust model.
Persistence & Privilege
The skill does not request always:true or persistent system-wide privileges. It is user-invocable and can be called autonomously by the agent (platform default), which is expected for skills of this type.
Assessment
This skill is coherent, but before installing: 1) Confirm you trust Membrane/getmembrane.com and the @membranehq npm package publisher (review package page, repository and homepage). 2) When you run 'membrane login' inspect the OAuth consent and scopes — Membrane will be able to access Altoviz data on your behalf. 3) Prefer using a least-privilege or test Altoviz account for initial trials and revoke the connection if you stop using it. 4) If you’re concerned about installing a global npm package system-wide, install the CLI in an isolated environment or container. 5) Don’t paste other secrets into the commands — follow the documented browser flow and review Membrane’s privacy/security docs if needed.Like a lobster shell, security has layers — review code before you run it.
latestvk97bxybkn3mk4pwzfpmwnhe8g5842qh2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.