Centrifuge
v1.0.2Centrifuge integration. Manage data, records, and automate workflows. Use when the user wants to interact with Centrifuge data.
⭐ 0· 77·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is an integration for Centrifuge and explicitly delegates auth and API forwarding to the Membrane platform/CLI. The actions, proxying, and discovery flows described align with the stated purpose.
Instruction Scope
SKILL.md stays within the integration's scope: it instructs installing and using the Membrane CLI, creating connections, listing actions, running actions, and proxying requests. It does not instruct the agent to read arbitrary files or exfiltrate unrelated data. It does require interactive login (browser-based or headless flow).
Install Mechanism
There is no install spec in the registry metadata (skill is instruction-only), but the instructions tell the user/agent to run 'npm install -g @membranehq/cli'. Installing a global npm package is a normal way to get a CLI but does execute third-party code on the host; this is expected for a CLI-driven integration but worth acknowledging.
Credentials
The skill declares no required environment variables or credentials and relies on Membrane to manage authentication. That is proportionate to a connector-style integration; it avoids asking for unrelated secrets.
Persistence & Privilege
The skill is not always-enabled and uses normal model invocation. It does not request system-wide configuration changes or modify other skills. No excessive persistence or elevated privileges are requested.
Assessment
This skill is coherent: it uses the Membrane CLI to access Centrifuge and asks you to authenticate via Membrane rather than handing it API keys. Before installing, verify the @membranehq/cli package and publisher on npm (or review its GitHub repo), prefer a sandboxed environment or non-global install if you want to limit host exposure, and confirm you trust Membrane as the proxy that will hold and refresh credentials. If you need higher assurance, pin a CLI version, inspect the package source, or run the CLI inside a container. Overall, nothing in the instructions appears disproportionate to a Centrifuge integration.Like a lobster shell, security has layers — review code before you run it.
latestvk978wbs3e93t0cfpvpys7vk2z5842kwt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.