Documenterra
v1.0.2Documenterra integration. Manage Documents, Folders, Users, Groups, Tags. Use when the user wants to interact with Documenterra data.
⭐ 0· 92·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (Documenterra integration) align with the instructions: all operations are performed via the Membrane CLI and target Documenterra connectors, actions, and API proxying. No unrelated credentials, binaries, or system paths are requested.
Instruction Scope
The SKILL.md confines itself to Membrane CLI commands (login, connect, action list/run, request proxy). It instructs how to discover and run actions and how to proxy arbitrary API calls through Membrane. This is within scope, but note that the proxy capability lets the user (or agent) send arbitrary requests to the Documenterra API through Membrane — expected for this integration but potentially powerful, so only use with trusted Membrane connections.
Install Mechanism
There is no registry install spec, but the runtime instructions tell the user to run npm install -g @membranehq/cli. Installing a globally-published npm CLI is a reasonable way to get the required tool, but it is an external package install (moderate risk): verify the package name, publisher, and version before installing, and avoid installing global packages on sensitive/host systems without review.
Credentials
The skill does not request environment variables or local credentials. SKILL.md emphasizes that Membrane handles authentication server-side and explicitly recommends not asking users for API keys — this is proportionate and appropriate for the stated purpose.
Persistence & Privilege
No special persistence or elevated privileges are requested. always is false, autonomous invocation is allowed (platform default). The skill makes no claim to modify other skills or global agent settings.
Assessment
This skill is instruction-only and coherent: it expects you to install and use the Membrane CLI to manage Documenterra via connectors and a proxy. Before installing or using it: 1) verify the npm package @membranehq/cli and the publisher (and prefer installing in a controlled environment or container rather than a shared machine); 2) confirm the getmembrane.com and repository URLs are legitimate for your organization; 3) remember Membrane's proxy can send arbitrary API calls to Documenterra — only connect accounts and allow operations you trust; 4) follow least-privilege practices (use an account/connection with only the permissions needed); and 5) if you need stronger assurance, inspect the CLI package source or run it in an isolated environment first.Like a lobster shell, security has layers — review code before you run it.
latestvk9709ah45wdmyrvpxn9nx9xtzs843eh7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.