Docsumo
v1.0.2Docsumo integration. Manage Documents, Workspaces, Users, Roles. Use when the user wants to interact with Docsumo data.
⭐ 0· 92·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The SKILL.md describes a Docsumo integration and all runtime instructions call the Membrane CLI to discover connections, run actions, and proxy requests to Docsumo. The use of Membrane (homepage getmembrane.com) is consistent with the described behavior; no unrelated services or credentials are requested.
Instruction Scope
All instructions are limited to installing/using the Membrane CLI, performing browser-based login, creating/using a connector, enumerating actions, running actions, and proxying API requests. The instructions do not tell the agent to read local config files, arbitrary environment variables, or exfiltrate data to unexpected endpoints. Be aware that some actions can be destructive (e.g., delete-document) and will run via the CLI when invoked.
Install Mechanism
This is an instruction-only skill (no install spec). It instructs the user to install @membranehq/cli via `npm install -g`. Installing an npm package globally runs third-party code on the machine — that is a standard but non-trivial action and should be done only after verifying the package and publisher on the npm registry.
Credentials
The skill requests no environment variables or credentials directly and explicitly recommends letting Membrane manage auth via browser login and connector creation. This is proportionate to its purpose.
Persistence & Privilege
The skill does not request always:true and is user-invocable. It does not modify other skills or system-wide settings. Autonomous invocation remains allowed by default, which is normal for skills but not requested here specifically.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to talk to Docsumo. Before installing/using it: (1) Verify you trust the @membranehq/cli package on npm (global installs execute code on your machine). (2) Be aware that CLI-run actions can perform destructive operations (e.g., delete-document) — only run actions you intend. (3) The skill relies on a Membrane account and browser-based auth; check the account's permissions and where credentials are stored. (4) Note the SKILL metadata links to getmembrane.com (Membrane) rather than docsumo.com — this is expected but verify you are comfortable routing Docsumo traffic through Membrane. If you need stronger assurance, ask the skill author for a minimal list of action IDs and confirm that only non-destructive actions will be invoked automatically.Like a lobster shell, security has layers — review code before you run it.
latestvk97e1e5g8vg29m6d973ed63cd98422sp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.