Alumio
v1.0.0Alumio integration. Manage data, records, and automate workflows. Use when the user wants to interact with Alumio data.
⭐ 0· 57·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The skill declares an Alumio integration and its instructions exclusively show how to use the Membrane CLI to discover connectors, create connections, run actions, and proxy requests to Alumio. Required capabilities (network access and a Membrane account) match the stated purpose.
Instruction Scope
SKILL.md instructs only CLI usage (membrane login, connection/action list/run, membrane request). It does not direct reading unrelated files, scraping local env vars, or transmitting data to endpoints other than through Membrane's proxy for the intended service. Headless auth flow is described; no scope creep detected.
Install Mechanism
The skill recommends installing @membranehq/cli globally via npm (npm install -g @membranehq/cli). This is an expected mechanism for a CLI-driven integration but carries the usual caveats of global npm installs (you should verify the package provenance and permissions). There is no automated install in the skill itself.
Credentials
The skill requires no environment variables or credentials in the package metadata. The instructions explicitly advise letting Membrane manage credentials and not to ask users for API keys. Requested access (Membrane account + network) is proportionate to the functionality.
Persistence & Privilege
always is false and the skill is user-invocable. There is no indication the skill modifies other skills or system-wide agent settings or requests persistent elevated privileges.
Assessment
This skill is coherent: it uses the Membrane CLI to talk to Alumio and asks only for a Membrane account and network access. Before installing: verify the @membranehq/cli package on npm (publisher, downloads, repository) if you will run a global npm install; prefer installing in a controlled environment or using npx to avoid global installs if you are uneasy. Understand the login flow will open a browser (or use the headless flow) and that Membrane will hold the Alumio credentials on your behalf—confirm you trust https://getmembrane.com and the Membrane service. If you need stronger assurance, review the CLI source code linked from the package repository or run the CLI inside a sandboxed environment or container.Like a lobster shell, security has layers — review code before you run it.
latestvk973cznwzkx11xjv323926jezn84fpkq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.