Directa24
v1.0.0Directa24 integration. Manage data, records, and automate workflows. Use when the user wants to interact with Directa24 data.
⭐ 0· 29·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The name and description claim Directa24 integration and all runtime instructions are about installing and using the Membrane CLI to connect to Directa24 and run actions; nothing requested (no env vars, no config paths) is unrelated to that purpose.
Instruction Scope
The SKILL.md instructs the agent to install the Membrane CLI, perform login flows (browser-based or headless), run connector discovery/action commands, and proxy arbitrary Directa24 API requests through Membrane. This is coherent with the purpose, but proxying means requests and request bodies will be sent to Membrane's servers — users must trust Membrane with any data sent via the proxy.
Install Mechanism
No built-in install spec in the skill bundle; the instructions tell users to run `npm install -g @membranehq/cli`. Installing a global npm package is a standard approach but has moderate risk compared to instruction-only. The package is in an @membranehq scope (expected for this integration); users should verify the package source/version before global install.
Credentials
The skill declares no required environment variables or credentials and explicitly recommends creating a connection so Membrane manages auth server-side. The lack of unrelated secrets is proportionate to the described Directa24 integration.
Persistence & Privilege
The skill is not always-enabled and does not request system-wide changes. It is an instruction-only skill that relies on a CLI tool; there is no built-in persistence or elevated privilege requested by the skill itself.
Assessment
This skill appears to do what it claims: it operates via the Membrane CLI to connect to Directa24 and asks for no unrelated credentials. Before installing/using it, consider: (1) you must trust Membrane because proxying requests will send API calls and payloads through Membrane's servers; review Membrane's privacy/security/privacy policy and verify you are comfortable with that data flow; (2) the SKILL.md asks you to install a global npm package — verify the package (@membranehq/cli) and version and prefer non-global or containerized installs if you want tighter control; (3) during headless login you may copy codes/URLs — be cautious to only use the official login flows. If you cannot trust Membrane to handle authentication or proxy requests, do not install/use this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk979naw0zvddp05q3r905mh5ph8471y4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.