Documerge
v1.0.0Documerge integration. Manage data, records, and automate workflows. Use when the user wants to interact with Documerge data.
⭐ 0· 51·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Documerge integration) align with the instructions: the SKILL.md tells the agent to use the Membrane CLI to discover and run Documerge-related actions and proxy requests. The references to Documerge docs and a Membrane repository/homepage are coherent: Membrane is presented as the integration platform that brokers access to Documerge.
Instruction Scope
Runtime instructions are narrowly scoped to installing and using the Membrane CLI, logging in, creating a connection, listing actions, running actions, and proxying requests to Documerge. The instructions do not direct the agent to read unrelated files, environment variables, or system configuration. They do require network access and browser-based authentication (or a headless flow).
Install Mechanism
There is no embedded install spec in the skill bundle (instruction-only), but the SKILL.md instructs installing @membranehq/cli via npm -g. Installing a global npm CLI is a moderate-risk action because it executes third-party code on the host; however, the package name, homepage, and repository are provided, which helps verification. The skill itself does not automatically download or execute anything.
Credentials
The skill declares no required environment variables, secrets, or config paths. Authentication is delegated to Membrane (browser login / connection flow), which is consistent with the stated purpose. Because Membrane manages credentials server-side, the only proportionality consideration is trusting Membrane with access to your Documerge account/data.
Persistence & Privilege
The skill does not request permanent presence (always:false) and has no install-time code or steps that modify other skills or system-wide settings. It relies on an external CLI that the user may choose to install; otherwise the skill bundle itself does not persist or escalate privileges.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to access Documerge and asks for no unrelated permissions. Before installing or using it, consider the following: (1) Installing @membranehq/cli globally runs third-party code — verify the npm package, its publisher, and GitHub repository (review recent commits and issues). (2) Using the skill delegates Documerge credentials to Membrane — ensure you trust Membrane's service, privacy policy, and access controls, and prefer creating a least-privilege/test account if possible. (3) If you run the CLI in an automated or CI environment, prefer headless or non-interactive auth patterns and avoid using highly-privileged personal accounts. (4) Run the installation in an isolated environment (container/VM) if you have concerns about global npm installs. If you want extra assurance, inspect the Membrane CLI source on the linked GitHub repo and the npm package contents before installation.Like a lobster shell, security has layers — review code before you run it.
latestvk9756xfjwrjdygd3wadhr86xk184ccsr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.