Clockodo
v1.0.2Clockodo integration. Manage data, records, and automate workflows. Use when the user wants to interact with Clockodo data.
⭐ 0· 74·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is described as a Clockodo integration and all runtime instructions use the Membrane CLI and Clockodo API proxying, which is coherent. Minor inconsistency: the registry metadata lists no required binaries, but SKILL.md expects the Membrane CLI (installed via npm or used with npx).
Instruction Scope
SKILL.md confines actions to discovering and running Membrane-provided Clockodo actions and proxying Clockodo API requests. It does not instruct the agent to read unrelated files, ask for unrelated credentials, or exfiltrate data to arbitrary endpoints.
Install Mechanism
There is no formal install spec in the registry, but the instructions tell the user/agent to run 'npm install -g @membranehq/cli' or use npx. Installing from the public npm registry is a typical pattern but is a moderate-risk operation compared with no install; the SKILL.md uses well-known tooling (npm/npx) and does not reference ad-hoc download URLs.
Credentials
No environment variables or credentials are requested in the manifest. The document explicitly directs the integrator to let Membrane manage credentials (browser-based OAuth flow), which is proportional for this connector.
Persistence & Privilege
always is false, there is no install-time persistence requested, and the skill does not instruct modification of other skills or system-wide settings. Normal autonomous invocation is allowed but is not combined with other concerning privileges.
Assessment
This skill appears coherent: it expects you to use the Membrane CLI to create a Clockodo connection and run actions or proxy API requests. Before installing/using it: 1) be prepared to perform a browser-based login (Membrane will hold the connection tokens server-side); 2) understand that SKILL.md expects the Membrane CLI (npm install -g or npx); if you prefer, verify the CLI package (@membranehq/cli) from the npm registry and the publisher before installing globally; 3) confirm you trust Membrane to manage your Clockodo credentials (review their docs/privacy); and 4) if you want registry metadata to be stricter, ask the skill author to declare the required binary (membrane) in the manifest or provide an explicit install spec. Overall this skill is internally consistent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk971stx89mg15xc7k8ztvh4b2x8423zm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.