Cumulio
v1.0.0Cumul.io integration. Manage data, records, and automate workflows. Use when the user wants to interact with Cumul.io data.
⭐ 0· 57·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description align with instructions: the SKILL.md consistently describes interacting with Cumul.io via the Membrane CLI. The required capabilities (network access, a Membrane account, browser-based auth) are appropriate for the described functionality.
Instruction Scope
Instructions are limited to installing and using the Membrane CLI to discover actions, run them, and proxy requests to the Cumul.io API. This is within scope. Note: the 'membrane request' proxy allows arbitrary proxied HTTP requests to Cumul.io (or other endpoints exposed by a connector), which means data will transit Membrane servers — assess whether that aligns with your privacy/ownership requirements.
Install Mechanism
There is no formal install spec; the instructions ask the user to run 'npm install -g @membranehq/cli'. Installing a global npm package is a reasonable and common step for a CLI but does modify the host environment and pulls code from the public npm registry. This is moderate risk only if you don't trust the package or want to avoid global installs.
Credentials
The skill requests no local environment variables or credentials and explicitly recommends using Membrane-managed connections instead of asking for API keys. The declared requirements (Membrane account) are proportional to the integration.
Persistence & Privilege
The skill is instruction-only, has always: false, and does not request persistent system-level privileges or modify other skills' configurations. Agent invocation and autonomous use are allowed by default but not elevated by this skill.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to talk to Cumul.io. Before installing, consider: 1) You will be asked to globally install @membranehq/cli from npm — confirm you trust that package and prefer global installs. 2) Membrane handles auth and proxies requests — data and auth tokens will be managed by Membrane servers, so review their privacy/security stance and only connect accounts you are comfortable exposing to that service. 3) Use a dedicated or least-privilege Cumul.io account/connection for testing if you have sensitive data. 4) Because the SKILL.md contains runtime shell commands, run them manually in a controlled environment first (or inspect the CLI package) if you want to verify behavior. If you need higher assurance, request the skill author provide a vetted install spec (signed releases or GitHub release links) or more details about what the Membrane connector does under the hood.Like a lobster shell, security has layers — review code before you run it.
latestvk97bwf4wda03retbv5x9dewet1849g5a
License
MIT-0
Free to use, modify, and redistribute. No attribution required.