Crawlbase
v1.0.2Crawlbase integration. Manage data, records, and automate workflows. Use when the user wants to interact with Crawlbase data.
⭐ 0· 113·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Crawlbase integration) matches the runtime instructions: it tells the agent to use the Membrane CLI to discover connectors, create a connection to Crawlbase, and run Crawlbase actions. Nothing requested (no env vars, no system paths) is unrelated to that purpose.
Instruction Scope
The SKILL.md stays on-topic (install membrane CLI, login flow, list/connect/run actions, and proxy requests via Membrane). One noteworthy point: it documents using `membrane request` to send arbitrary paths through Membrane's proxy — this is expected for a connector but means any proxied request will carry the connection's auth, so be deliberate about which connection and endpoints you run commands against.
Install Mechanism
There is no automated install spec bundled with the skill (instruction-only). The doc tells users to run `npm install -g @membranehq/cli` — a reasonable but non-trivial action (global npm install). Installing a third-party CLI from npm is expected here but carries the usual supply-chain risk; verify the npm package/source if you have concerns.
Credentials
The skill requests no environment variables or credentials and delegates auth to Membrane (browser-based login / connection flow). That is proportionate to its purpose. The doc explicitly advises not to ask the user for API keys, which aligns with delegated auth.
Persistence & Privilege
The skill is not always-enabled and does not request elevated or cross-skill configuration changes. It is instruction-only and does not write persistent config itself; autonomous invocation is allowed by default but that is normal and expected.
Assessment
This skill is coherent: it requires a network connection and a Membrane account and tells you to install the official Membrane CLI. Before installing, verify the npm package (@membranehq/cli) and the Membrane account are legitimate. Be aware that using `membrane request` will proxy requests carrying the connection's authentication — only run commands against endpoints you trust. Avoid pasting secret keys into the skill; follow the documented login/connection flow. If you need additional assurance, check the referenced repository and the npm package publisher for provenance before installing the CLI globally.Like a lobster shell, security has layers — review code before you run it.
latestvk97ebytvmbk06rnwckax6tmrzd842snx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.