Commandbar
v1.0.0CommandBar integration. Manage data, records, and automate workflows. Use when the user wants to interact with CommandBar data.
⭐ 0· 47·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is named 'Commandbar' and describes interacting with CommandBar data. All runtime instructions use the Membrane CLI to discover connectors, create connections, run actions, and proxy API requests to CommandBar — which matches the stated purpose.
Instruction Scope
SKILL.md confines operations to installing and invoking the Membrane CLI, logging in via the browser, creating/using a connector, listing actions, running actions, and proxying requests through Membrane. It does not instruct the agent to read unrelated local files, environment variables, or system configuration.
Install Mechanism
The skill instructs users to globally install @membranehq/cli via npm (npm install -g). This is a standard way to obtain a CLI but does install third-party code on the system (moderate risk). No arbitrary download URLs or extract operations are used.
Credentials
The skill declares no required environment variables or credentials and explicitly advises using Membrane connections rather than asking for API keys. The level of access requested is proportionate to its described function.
Persistence & Privilege
The skill is instruction-only, has no install spec, does not request always:true, and does not ask to modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) but not combined with other concerning privileges.
Assessment
This skill delegates all integration work to the Membrane CLI and requires you to sign in to a Membrane account. Before installing, verify you trust the @membranehq/cli npm package (review the package page, source repo, and publisher), and be aware that using the CLI will route CommandBar API requests through Membrane's servers (check Membrane's privacy/security docs). The npm -g install will place third-party code on your system — if you prefer, inspect the package source or run it in an isolated environment. Finally, the skill does not ask for local secrets or unrelated credentials, but you should still confirm you are comfortable granting Membrane access to your CommandBar data via the browser-based connection flow.Like a lobster shell, security has layers — review code before you run it.
latestvk974ngkea72113tv0he9ymthn184amf8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.