Annature
v1.0.2Annature integration. Manage data, records, and automate workflows. Use when the user wants to interact with Annature data.
⭐ 0· 99·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill describes Annature integration and the SKILL.md consistently instructs using the Membrane CLI to talk to Annature. Minor inconsistency: registry metadata lists no required binaries but the runtime instructions require the '@membranehq/cli' binary (installed via npm). The need for a Membrane account and network access is consistent with the stated purpose.
Instruction Scope
Instructions are focused on installing and using the Membrane CLI to create connections, list/run actions, and proxy raw API requests. They do not instruct reading unrelated local files or environment variables. They do require interactive browser login or a headless login flow.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but SKILL.md directs users to run 'npm install -g @membranehq/cli'. Installing a global npm CLI is a standard approach but carries moderate risk (third-party package installation, global write access). Verify the official package name and origin on the npm registry before installing.
Credentials
The skill requests no environment variables or local secrets, and defers auth to Membrane. However, this means API calls and document payloads will transit Membrane's servers (they handle auth and refresh). That is proportionate to the described integration but raises privacy/third-party trust considerations—sensitive documents will be visible to the proxy service.
Persistence & Privilege
The skill is instruction-only, does not request persistent 'always' inclusion, and does not appear to modify other skills or system-wide configuration. Normal autonomous invocation remains allowed (platform default).
Assessment
This skill is internally consistent: it uses the Membrane CLI to proxy calls to Annature rather than asking you for API keys. Before installing, verify the '@membranehq/cli' package on the official npm registry and confirm the package author is legitimate. Understand that documents and metadata will pass through Membrane's servers (so review their privacy/security policies). Also note the registry metadata omits the required CLI binary — expect to install a global npm tool. If you handle sensitive signed documents, consider whether you accept having that data routed through a third-party proxy.Like a lobster shell, security has layers — review code before you run it.
latestvk972z5wcf9ycrebf316ek0jmzn842nap
License
MIT-0
Free to use, modify, and redistribute. No attribution required.