Dronedeploy
v1.0.2DroneDeploy integration. Manage data, records, and automate workflows. Use when the user wants to interact with DroneDeploy data.
⭐ 0· 57·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Skill name/description (DroneDeploy integration) match the instructions: it tells the agent to use the Membrane CLI to connect to and proxy requests to DroneDeploy. No unrelated services, env vars, or binaries are requested.
Instruction Scope
SKILL.md stays within scope: it instructs installing and using the Membrane CLI, creating a connection, listing actions, running actions, and proxying requests to DroneDeploy. It does not ask the agent to read unrelated files, environment variables, or transmit data to unexpected endpoints.
Install Mechanism
There is no formal install spec in the registry metadata, but SKILL.md instructs users to run `npm install -g @membranehq/cli` (and suggests using npx). Installing a global npm package is a normal approach but is something the user runs manually and should verify (check the package on npm/GitHub) before installing.
Credentials
The skill declares no required environment variables or credentials. It relies on the Membrane service and a Membrane account as described, which is proportional to the stated purpose. No unrelated secrets are requested.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It is instruction-only and will operate by running Membrane CLI commands when invoked.
Assessment
This skill appears coherent: it expects you to install and use the Membrane CLI and to have a Membrane account; Membrane will manage DroneDeploy credentials so the skill itself doesn't ask for API keys. Before installing or running commands, verify the Membrane CLI package and its maintainers (npm and GitHub) and confirm you trust getmembrane.com. Installing global npm packages has risk—review the package source and permissions. Also be aware that once connected, running actions or proxy requests can read or modify your DroneDeploy account data, so only create connections you authorize and review connection IDs and action inputs before executing. If you need higher assurance, request the skill author/source repository or an install spec so you can audit the exact commands and packages involved.Like a lobster shell, security has layers — review code before you run it.
latestvk979pwy5cjv59pe424w1shqp5h84394y
License
MIT-0
Free to use, modify, and redistribute. No attribution required.