Draftable
v1.0.0Draftable integration. Manage Documents. Use when the user wants to interact with Draftable data.
⭐ 0· 56·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Draftable integration) align with the instructions: all runtime steps are about installing and using the Membrane CLI to connect to Draftable and run actions or proxy requests. There are no unrelated environment variables, binaries, or config paths requested.
Instruction Scope
SKILL.md confines the agent to using the Membrane CLI, browser-based login, connector creation, action listing/running, and proxying requests to Draftable. It does not instruct reading arbitrary local files, harvesting environment variables, or sending data to unexpected endpoints. Headless-auth guidance is scoped to completing Membrane's login flow.
Install Mechanism
There is no formal install spec in the skill bundle, but the instructions tell users to run `npm install -g @membranehq/cli`. Recommending a global npm install is common for CLIs but does run third-party code on the host; this is expected for a CLI-based integration but worth verifying the package source and reviewing its permissions before installing.
Credentials
The skill requests no environment variables or local credentials. It explicitly delegates auth to Membrane (server-side credential management). The only external requirement is a valid Membrane account, which is proportional to the described functionality.
Persistence & Privilege
The skill is instruction-only, has no install-time hooks, and is not marked always:true. It does not request persistent system-wide privileges or modify other skills' configs. Autonomous invocation is allowed by default but is not combined with any broad or unexpected privileges here.
Assessment
This skill is coherent and appears to do what it says: it uses the Membrane CLI to access Draftable. Before installing or using it, verify that `@membranehq/cli` is the official package (check the package repository and maintainers), and consider installing it in a controlled environment if you are cautious (global npm installs execute third‑party code). Remember that Membrane proxies requests and manages credentials server-side — your document contents will transit Membrane, so ensure you are comfortable with that data flow and with Membrane's privacy/security posture before connecting sensitive documents.Like a lobster shell, security has layers — review code before you run it.
latestvk973906b9vcwxxrxapdnzqfyw183j0v4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.