Cyfe
v1.0.2Cyfe integration. Manage data, records, and automate workflows. Use when the user wants to interact with Cyfe data.
⭐ 0· 83·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to integrate with Cyfe and its SKILL.md consistently uses the Membrane CLI as the integration mechanism. One minor inconsistency: the skill metadata lists no required binaries, but the runtime instructions require installing the `membrane` CLI (npm @membranehq/cli). This is coherent functionally but the manifest omission is a small mismatch.
Instruction Scope
Instructions are focused on using Membrane to discover actions, run actions, and proxy arbitrary Cyfe API endpoints. They do not instruct reading unrelated local files or environment variables. However, the proxy capability means the skill (via Membrane) can issue arbitrary requests to the Cyfe API on the user's behalf — that is expected for an integration but broad in scope.
Install Mechanism
There is no packaged install spec in the registry; the SKILL.md instructs users to run `npm install -g @membranehq/cli`. Installing a global npm package from the public registry is a moderate-risk action (you must trust the package and its publisher). The skill does not download arbitrary archives or run undocumented installers.
Credentials
The skill declares no required environment variables and the instructions explicitly say not to ask users for API keys — authentication is done via Membrane's browser OAuth flow. The tradeoff: granting a Membrane connection gives Membrane (and any service operators) access to the user's Cyfe data — this is proportional to the stated purpose but requires trusting Membrane.
Persistence & Privilege
The skill does not request always:true, no config paths or system-wide changes are requested, and it is user-invocable. It relies on the Membrane CLI and the Membrane cloud to store connection credentials; that behavior is expected for this pattern.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to interact with Cyfe. Before installing or using it, consider: (1) You will need to install a third-party global npm package (@membranehq/cli) — review that package and its publisher. (2) Using the skill requires a Membrane account and a connection that grants Membrane proxy access to your Cyfe data — only proceed if you trust Membrane and understand the scopes granted. (3) The skill metadata omitted declaring the required `membrane` binary; verify you are comfortable running the install steps in SKILL.md. (4) If you handle sensitive data, review Membrane's privacy/security docs and limit granted scopes where possible. If you want extra assurance, test with a limited or sandbox Cyfe account first.Like a lobster shell, security has layers — review code before you run it.
latestvk97e3fma42j77pgy2jm5g7z6r1843ahf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.