Cheddar
v1.0.2Cheddar integration. Manage data, records, and automate workflows. Use when the user wants to interact with Cheddar data.
⭐ 0· 138·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Cheddar integration) align with the instructions: all runtime steps use the Membrane CLI to connect to Cheddar, list actions, run actions, and proxy API requests. Nothing requested is unrelated to interacting with Cheddar data.
Instruction Scope
SKILL.md confines runtime behavior to installing/using the Membrane CLI, creating/listing connections, running actions, and proxying requests to the Cheddar API. It does not instruct reading arbitrary host files or requesting unrelated credentials. Browser-based auth and headless login flows are documented, which is expected for this type of integration.
Install Mechanism
The skill is instruction-only (no automatic install spec), but it tells the user to run `npm install -g @membranehq/cli`. Installing a global npm package executes third-party code from the npm registry (normal for CLIs but a moderate operational risk if you don't trust the package). There is no opaque download URL or archive extraction in the registry metadata.
Credentials
No environment variables, config paths, or credentials are required by the skill. The SKILL.md explicitly delegates auth to Membrane and advises not to ask users for API keys or tokens, which is proportionate for this connector.
Persistence & Privilege
The skill does not request permanent presence (always:false), has no install-time code that modifies other skills or system-wide settings, and relies on a user-installed CLI. Autonomous invocation is allowed by platform default but is not combined with other concerning privileges here.
Assessment
This skill appears to do what it says: it instructs you to use the Membrane CLI to connect to Cheddar and run actions. Before proceeding: (1) be prepared to create a Membrane account and complete an interactive browser login; (2) installing the CLI requires `npm install -g @membranehq/cli`—only install packages you trust since global npm installs run third-party code; (3) understand that Membrane will hold and proxy Cheddar credentials on your behalf (review Membrane's privacy/security docs if you care about third-party access to your Cheddar data); and (4) the skill will invoke local CLI commands—ensure you trust the command outputs and follow any interactive prompts during login.Like a lobster shell, security has layers — review code before you run it.
latestvk97bn292yh6pefhsmqdw2mqckh842609
License
MIT-0
Free to use, modify, and redistribute. No attribution required.