Doppler
v1.0.2Doppler integration. Manage data, records, and automate workflows. Use when the user wants to interact with Doppler data.
⭐ 0· 74·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Doppler integration) matches the runtime instructions: the skill consistently instructs use of the Membrane CLI to connect to Doppler, list actions, run actions, and proxy requests. No unrelated credentials, binaries, or paths are requested.
Instruction Scope
Instructions are constrained to installing/using the Membrane CLI, logging in, creating/listing connections, running actions, and proxying requests. Notable: proxying sends requests (and thus possibly secrets) through Membrane's servers — this is expected for this integration but is a privacy/third‑party exposure to be aware of.
Install Mechanism
No install spec in the registry (skill is instruction-only), but SKILL.md recommends installing @membranehq/cli via npm (-g) or using npx. Installing a public npm CLI is a common pattern; it's moderate risk compared with direct downloads but you should verify package provenance and prefer npx or pinned versions if you want minimal global installs.
Credentials
The skill requests no environment variables or secrets and directs users to create a Membrane connection (server‑side auth). The lack of extra credential asks is proportionate. Reminder: using Membrane hands over auth handling to a third party.
Persistence & Privilege
Skill is not always-on and does not request elevated or persistent privileges. It does not modify other skills or system-wide settings according to the provided instructions.
Assessment
This skill appears coherent for connecting to Doppler via Membrane. Before installing or running the CLI: verify the @membranehq/cli package and the repository (ensure it's the official publisher), consider using npx or a pinned CLI version instead of a global npm install, and understand that Membrane will proxy requests and handle your Doppler credentials (so you must trust Membrane's service and privacy/security practices). If you cannot trust a third party to see or proxy your secrets, do not use this integration and instead use a direct, vetted Doppler client under your own control.Like a lobster shell, security has layers — review code before you run it.
latestvk9766xs4jdw21r8cee9jtjkfyd842vk3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.