Blue
v1.0.2Blue integration. Manage data, records, and automate workflows. Use when the user wants to interact with Blue data.
⭐ 0· 96·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to integrate with 'Blue' via Membrane and all runtime instructions focus on using the Membrane CLI to discover connectors, create connections, run actions, and proxy requests — which is coherent for a third-party integration. However, the SKILL.md contains an unrelated link to Apple Bluetooth docs and placeholder text ('I don't have enough information...'), which looks like documentation noise or an editing mistake and should be confirmed.
Instruction Scope
All instructions are limited to installing and using the Membrane CLI (npm install -g @membranehq/cli), logging in, discovering connectors/actions, running actions, and proxying requests. The instructions do not tell the agent to read arbitrary local files or request unrelated environment variables.
Install Mechanism
This is an instruction-only skill (no install spec baked into the manifest). It instructs users to install the Membrane CLI from the public npm registry using `npm install -g @membranehq/cli` — an expected approach but a moderate-risk action because it installs a global npm package requiring user privileges; verify the package and its publisher before installing.
Credentials
The skill declares no required environment variables or credentials. Authentication is delegated to the Membrane CLI/browser flow. That is proportionate, but note that authorizing a connector via Membrane will grant Membrane (and thus the installed CLI session) access tokens for the target service — review connector permissions when authenticating.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and has no install-time persistence defined in the manifest. Autonomous invocation is allowed (platform default) and is not by itself a concern here.
Assessment
This skill appears to be a Membrane-backed connector for a service named 'Blue' and is mostly coherent: it asks you to install the Membrane CLI and sign in via browser so Membrane can manage credentials. Before installing or using it: (1) verify that 'Blue' is the service you expect — the SKILL.md contains an unrelated Apple Bluetooth link and placeholder text which suggests the docs are incomplete; (2) confirm the npm package @membranehq/cli is legitimate and from a trusted publisher before running `npm install -g`; (3) when you authenticate the connector in your browser, review the permissions requested by the connector (those tokens grant access to your Blue data via Membrane); and (4) avoid running any copied commands you don't understand in environments where you cannot open a browser (the CLI has a headless flow but it prints URLs/codes). If you need higher assurance, ask the skill author to correct the documentation and provide a clear link to the official Blue API/docs and to confirm what 'Blue' refers to.Like a lobster shell, security has layers — review code before you run it.
latestvk974cttvpw9y3tnwx06eg5ecp1842gy9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.