ClawHub

Cisco Meraki

v1.0.2

Cisco Meraki integration. Manage data, records, and automate workflows. Use when the user wants to interact with Cisco Meraki data.

⭐ 0· 126·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The skill legitimately targets Cisco Meraki via the Membrane platform and its documented actions align with that purpose. However, the registry metadata declares no required binaries or env vars while SKILL.md instructs installing the Membrane CLI via 'npm install -g', implying Node/npm are required — an undeclared dependency.
✓
Instruction Scope
SKILL.md limits runtime actions to using the Membrane CLI, creating connections, listing/running actions, and optionally proxying API requests through Membrane. It does not instruct reading local files or environment variables or exfiltrating secrets; it explicitly advises against asking users for API keys.
ℹ
Install Mechanism
There is no automatic install spec (instruction-only), which minimizes automated risk. Still, the instructions require a global npm install of @membranehq/cli; installing global npm packages requires Node/npm on the host and is an action the user must vet before running.
✓
Credentials
No environment variables or credentials are requested by the skill itself; authentication is delegated to Membrane (browser-based login and server-side credential handling), which is proportionate to the stated integration task.
✓
Persistence & Privilege
The skill does not request always:true or other elevated persistence. It can be invoked autonomously (platform default) and will use network access to call Membrane; users should be aware autonomous invocation allows running actions that can change Meraki configuration.
Assessment
This skill appears to be what it claims (a Meraki integration via Membrane) but check a few things before installing: 1) Confirm you trust Membrane (review https://getmembrane.com and the GitHub repo) since authentication and API calls are proxied through their service. 2) The SKILL.md requires installing the Membrane CLI with 'npm install -g @membranehq/cli' — ensure you are comfortable installing global npm packages and that Node/npm are available; the registry metadata does not list these prerequisites. 3) The skill will open a browser for login and then can run actions that modify your Meraki configuration — use a least-privilege Membrane connection or test account if possible. 4) Do not enter API keys into chat; follow the connection flow described. 5) If you want tighter control, consider disabling autonomous invocation for the skill until you verify its behavior or limit the agent's permissions when creating the Membrane connection.

Like a lobster shell, security has layers — review code before you run it.

latestvk977cbvw0f3sbykqb9x4dvvcmx8431nv

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments