Decentro
v1.0.0Decentro integration. Manage data, records, and automate workflows. Use when the user wants to interact with Decentro data.
⭐ 0· 64·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to provide a Decentro integration and all runtime instructions consistently use the Membrane CLI and Membrane connector model to access Decentro. Requesting a Membrane account and network access is coherent with the stated purpose.
Instruction Scope
SKILL.md directs the agent/user to install and use the Membrane CLI, create/connect a Decentro connector, list and run actions, and optionally proxy arbitrary Decentro API requests via Membrane. These actions stay within the integration scope and do not ask the agent to read unrelated files, env vars, or system state.
Install Mechanism
There is no automated install spec in the registry; instructions tell the user to run `npm install -g @membranehq/cli` or use `npx` for one-off commands. Installing packages from npm is expected for a CLI but carries the usual supply-chain risk of npm packages — the skill itself does not auto-install anything.
Credentials
The skill declares no required environment variables or credentials and advises using Membrane-managed connections instead of asking for API keys. The requested access (network + Membrane account) is appropriate for interacting with Decentro via Membrane.
Persistence & Privilege
The skill is instruction-only, has no install hooks, and is not marked always:true. It does not request permanent presence or elevated agent-wide configuration changes.
Assessment
This skill is an instruction-only adapter that expects you to install and use the Membrane CLI to access Decentro. Before installing or running commands: (1) verify you trust Membrane (https://getmembrane.com and the referenced GitHub repo) because it will mediate authentication and can proxy API calls to Decentro; (2) be aware that installing the CLI uses npm (supply-chain risk) — inspect the package or use `npx` for one-off invocations if you prefer not to install globally; (3) authentication happens via browser-based OAuth/consent flows — you will grant Membrane access to your Decentro account when creating a connection; (4) never provide raw Decentro API keys to the agent — follow the skill's guidance to use Membrane connections. There were no static scan findings to analyze.Like a lobster shell, security has layers — review code before you run it.
latestvk978y67ct6as4gmd9j1bcbbcz9845tsx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.