Bilionis
v1.0.2Bilionis integration. Manage data, records, and automate workflows. Use when the user wants to interact with Bilionis data.
⭐ 0· 128·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with Bilionis via Membrane and all runtime instructions use the Membrane CLI and Bilionis endpoints — this matches the stated purpose. Minor inconsistency: SKILL.md instructs installing/using the 'membrane' CLI (and therefore requires npm and a global install capability), but the registry metadata lists no required binaries; the skill should have declared 'membrane' (or npm) as a required binary.
Instruction Scope
SKILL.md confines the agent to using the Membrane CLI and Membrane's proxy to call Bilionis APIs, and explicitly advises not to ask users for API keys. It does not instruct reading unrelated local files, environment variables, or exfiltrating data to third-party endpoints outside Membrane/Bilionis.
Install Mechanism
No install spec is present in the registry (instruction-only), but the README asks the user to run 'npm install -g @membranehq/cli'. Installing an npm global package is a reasonable and common step for this integration, but it has moderate risk (npm package provenance and global install rights). The skill does not include binaries or download URLs itself.
Credentials
The skill requests no environment variables or credentials in the metadata. Runtime instructions rely on Membrane for authentication (browser-based login and server-side token handling), which is proportionate to the stated purpose.
Persistence & Privilege
The skill is not always-enabled and uses the default autonomous invocation behavior. It does not request persistent system privileges or attempt to modify other skills or system-wide agent configs.
Assessment
This skill appears to be what it says: a Bilionis integration accessed through the Membrane CLI. Before installing, confirm you trust the @membranehq/cli npm package and its publisher (npm package provenance), and be aware that the tool requires a global npm install (admin rights may be needed). Authentication is done via Membrane's browser flow, meaning credentials/tokens are handled by Membrane — review their privacy/security docs if that matters to you. Finally, the SKILL.md should have declared 'membrane' (or npm) as a required binary; if you need that explicit declaration for policy or automation, ask the skill author to update the metadata.Like a lobster shell, security has layers — review code before you run it.
latestvk97a9s047a9b6c2y98gbz13e5n842ppx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.