Askyourpdf
v1.0.2AskYourPDF integration. Manage data, records, and automate workflows. Use when the user wants to interact with AskYourPDF data.
⭐ 0· 136·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description claim AskYourPDF integration and the SKILL.md instructs using Membrane to connect to AskYourPDF — this is coherent. However, the skill metadata declares no required binaries while the SKILL.md explicitly requires the @membranehq/cli to be installed (npm -g @membranehq/cli). That mismatch should be fixed in metadata but does not itself indicate malicious intent.
Instruction Scope
Instructions are narrowly focused on using the Membrane CLI to discover connectors, create connections, run actions, and proxy requests to AskYourPDF. There is no instruction to read unrelated files or request unrelated credentials. One scope note: the proxy capability (membrane request CONNECTION_ID /path/to/endpoint) allows issuing arbitrary API requests via the connected account, which is powerful but expected for a connector-based skill.
Install Mechanism
This is an instruction-only skill with no install spec. The runtime instructions direct a global npm install of @membranehq/cli, which will download and install code from the npm registry. That is a reasonable install method for this integration, but because the skill doesn't declare this as a required binary in its manifest, the metadata is incomplete and users should verify the npm package source before installing.
Credentials
The skill declares no required environment variables or credentials and the instructions explicitly rely on Membrane to manage authentication server-side. It does not ask for unrelated secrets or environment access. This appears proportionate to its purpose.
Persistence & Privilege
The skill does not request always: true and uses the platform defaults (user-invocable, agent-autonomy allowed). Nothing in the SKILL.md tries to change other skills' configs or request persistent system-wide privileges.
Assessment
This skill looks like a straightforward Membrane-based AskYourPDF integration, but before installing: (1) verify the @membranehq/cli npm package is the official package you expect (check the package owner, homepage, and repo), (2) be aware that running npm -g installs remote code globally — consider installing in a contained environment if you're cautious, (3) review what a Membrane connection will allow (the 'membrane request' proxy can call arbitrary connector endpoints using the connected account), and (4) avoid uploading highly sensitive documents until you've confirmed Membrane/AskYourPDF privacy and access policies. Also note the manifest should declare the required binary (membrane) — the omission is an oversight to ask the publisher to correct.Like a lobster shell, security has layers — review code before you run it.
latestvk97fr4k5aktv2364yfzgjmndzn843bft
License
MIT-0
Free to use, modify, and redistribute. No attribution required.