Charisma
v1.0.2Charisma integration. Manage data, records, and automate workflows. Use when the user wants to interact with Charisma data.
⭐ 0· 100·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill describes Charisma integration and all instructions use the Membrane CLI to discover connectors, create connections, run actions, or proxy API requests. There are no unrelated credentials, binaries, or config paths requested.
Instruction Scope
SKILL.md instructs the agent to install and run the Membrane CLI, create connections via browser-based auth, list actions, run actions, and proxy requests. It does not ask the agent to read arbitrary files, environment variables, or system configuration outside of using the CLI and network access. Proxying arbitrary endpoints via 'membrane request' is part of the stated purpose (direct API access through Membrane).
Install Mechanism
This is instruction-only (no automatic install). The doc tells users to install @membranehq/cli via npm (-g or npx). That is a standard, user-run step; it does mean a third-party CLI will be installed on the host if the user follows instructions—review the npm package and provider before installing.
Credentials
The skill declares no environment variables or local secrets. Authentication is performed via Membrane's browser-based login/connection flow and handled server-side. Note: the local CLI may cache tokens or state—users should understand where the CLI stores credentials and review its behavior if concerned.
Persistence & Privilege
always is false and the skill does not request elevated platform privileges or modify other skills. The skill allows the agent to run Membrane CLI commands (including arbitrary proxy requests) when invoked; autonomous model invocation is permitted by default but is not excessive for this integration.
Assessment
This skill is coherent: it uses the Membrane CLI to access Charisma and does not request unrelated secrets. Before installing or using it: (1) verify the @membranehq/cli npm package and the getmembrane.com service reputation/privacy policy; (2) understand that installing a global CLI gives that binary the ability to run network requests and may cache auth tokens locally—check where it stores credentials; (3) be aware that the agent (if allowed to run autonomously) can invoke 'membrane request' to read or write Charisma data—consider requiring explicit user confirmation for sensitive operations or restricting autonomous invocation if you want tighter control.Like a lobster shell, security has layers — review code before you run it.
latestvk97d146w0g7scexmw29872njvx842qby
License
MIT-0
Free to use, modify, and redistribute. No attribution required.