Didomi
v1.0.2Didomi integration. Manage data, records, and automate workflows. Use when the user wants to interact with Didomi data.
⭐ 0· 102·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Didomi integration) match the instructions: the skill directs the agent to use the Membrane CLI to connect to Didomi, list actions, run actions, and proxy requests. Asking the user to have a Membrane account is consistent with this design.
Instruction Scope
Instructions focus on installing and using the Membrane CLI, logging in, creating connections, listing/running actions, and proxying requests to the Didomi API. They do not ask the agent to read unrelated files or environment variables. Important caveat: these instructions cause Didomi data and auth tokens to flow through Membrane's service — the SKILL.md explicitly relies on Membrane to manage credentials and perform proxied requests.
Install Mechanism
No install spec is embedded in the registry (instruction-only), but the SKILL.md recommends a global npm install (npm install -g @membranehq/cli). This is a typical distribution channel (public npm) but has moderate risk compared with no install — global installs require elevated permissions and install remote code to the system.
Credentials
The skill requires no environment variables or local credentials. It delegates authentication to Membrane via an interactive browser flow, which is proportionate to the stated purpose. The SKILL.md explicitly instructs not to ask users for Didomi API keys, which aligns with using a proxy service.
Persistence & Privilege
The skill is not always-enabled and is user-invocable; it does not request persistent system privileges or modify other skills. There is no hidden persistence in the registry metadata.
Assessment
This skill is coherent: it expects you to use Membrane as a proxy to talk to Didomi. Before installing or using it, verify and trust Membrane (https://getmembrane.com): understand their privacy/terms because your Didomi data and OAuth credentials will be handled by their servers. Installing the recommended CLI involves a global npm package (npm install -g) which writes binaries system‑wide — run it only from a trusted environment and with an account permitted to install global packages. Prefer least-privilege connections when authorizing Membrane, review the connector scopes during login, and consider using a dedicated/test Didomi tenant or account if you want to limit exposure.Like a lobster shell, security has layers — review code before you run it.
latestvk976qajbad03dsczxsacfjk5px8425e6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
