Dandelion
v1.0.2Dandelion integration. Manage Organizations. Use when the user wants to interact with Dandelion data.
⭐ 0· 112·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The SKILL.md is focused on interacting with Dandelion via the Membrane CLI (listing actions, creating connections, proxying requests) which matches the stated purpose of a Dandelion integration. Minor mismatch: the short description mentions "Manage Organizations" but the instructions emphasize text analytics actions and creating connections rather than explicit organization-management workflows.
Instruction Scope
Instructions are concrete and limited to installing/using the Membrane CLI, performing login flows, creating connections, listing and running actions, and proxying requests to Dandelion. There are no instructions to read unrelated local files, export credentials, or post data to unexpected endpoints.
Install Mechanism
This is an instruction-only skill (no install spec). It instructs users to install @membranehq/cli globally via npm (npm install -g). That is a reasonable, expected dependency for a CLI-driven integration, but global npm installs have the usual operational considerations (permission prompts, PATH changes).
Credentials
The skill declares no required env vars or credentials and relies on Membrane to manage auth via browser login and server-side credential storage. That is proportionate to the described behavior. Users should still be aware that authenticating will grant Membrane account access to services it's connected to.
Persistence & Privilege
The skill does not request always:true or other elevated persistent privileges. It's an on-demand, user-invocable instruction-only skill with no code that would persist on disk beyond the user-installed Membrane CLI.
Assessment
This skill is internally consistent: it expects you to install and use the Membrane CLI to connect to Dandelion and does not request unrelated credentials. Before installing, verify you trust Membrane/@membranehq and the getmembrane.com homepage; be comfortable with the browser-based login granting Membrane access to the integrations you create. Consider installing the CLI in a virtual environment or container if you want to limit system-wide changes from a global npm install. If you need organization-management workflows, confirm that the skill actually exposes those actions (the SKILL.md focuses on text-analytics actions). If anything in the Membrane connection flow asks for elevated permissions you don't want to grant, stop and review the connection details first.Like a lobster shell, security has layers — review code before you run it.
latestvk97362kg08p32j79pd799ts6t1842b70
License
MIT-0
Free to use, modify, and redistribute. No attribution required.