Digi
v1.0.0Digi integration. Manage data, records, and automate workflows. Use when the user wants to interact with Digi data.
⭐ 0· 53·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is an integration shim for Digi and consistently instructs the agent/user to use the Membrane CLI and Membrane-managed connections to interact with Digi. No unrelated binaries, env vars, or config paths are requested.
Instruction Scope
The SKILL.md directs the user to install and run @membranehq/cli, create Membrane connections, list and run actions, and optionally proxy raw API requests via Membrane. These instructions do not ask the agent to read unrelated files or secrets, but they do route Digi API traffic through Membrane's proxy — so data and request details will go to Membrane's servers as part of normal operation.
Install Mechanism
There is no formal install spec in the registry; the README recommends installing the Membrane CLI with 'npm install -g @membranehq/cli' (or using npx). Installing from the public npm registry is typical but does execute third-party code on the host. Recommend verifying the package and preferring npx or containerized use if you want to avoid a global install.
Credentials
The skill declares no required environment variables, credentials, or config paths. It relies on Membrane to manage authentication which matches the stated guidance in SKILL.md (do not ask users for API keys). The requested permissions are proportional to the stated purpose.
Persistence & Privilege
The skill does not request 'always' presence or other elevated persistence. It is user-invocable and can be invoked autonomously by the agent (the platform default), which is expected for a functional integration.
Assessment
This skill appears internally consistent and intended to be used with the Membrane platform. Before installing or using it: (1) verify you trust the @membranehq CLI package and its homepage/repository; prefer 'npx @membranehq/cli' or run the CLI in a contained environment if you don't want a global install; (2) understand that Membrane acts as a proxy and will see requests and data you send to Digi — review Membrane's privacy/security docs if your data is sensitive; (3) when authenticating, follow the documented browser-based flow and be cautious about copy-pasting auth codes in untrusted contexts; (4) if you need higher assurance, inspect the CLI source code or run it in an isolated environment. Overall the skill does not request unrelated credentials or suspicious actions.Like a lobster shell, security has layers — review code before you run it.
latestvk977xj88bvw34np8pwvp0f4qw1848wme
License
MIT-0
Free to use, modify, and redistribute. No attribution required.