Edume
v1.0.0EduMe integration. Manage data, records, and automate workflows. Use when the user wants to interact with EduMe data.
⭐ 0· 67·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (EduMe integration) match the instructions: the SKILL.md documents how to use the Membrane CLI to connect to EduMe, discover actions, run actions, and proxy API calls. Requiring a Membrane account and network access is consistent with that purpose; there are no unrelated credentials, binaries, or config paths requested.
Instruction Scope
Instructions are narrowly scoped to installing/using the Membrane CLI, performing login flows, creating a connection to EduMe, listing/running actions, and proxying requests through Membrane. The instructions do not ask the agent to read arbitrary files, harvest environment variables, or send data to unexpected third-party endpoints beyond Membrane and the EduMe API (proxied by Membrane).
Install Mechanism
The skill is instruction-only and has no install spec. It instructs the user to install @membranehq/cli via npm (or to use npx). That is reasonable for this integration, but installing/running npm packages has typical supply-chain risk: verify package publisher (@membranehq), prefer npx for ad-hoc use, and confirm you trust the Membrane CLI before installing globally.
Credentials
No environment variables or local credentials are requested by the skill itself, which is proportional. However, the design intentionally delegates credential handling to Membrane: connections and API calls are proxied through Membrane, which will see and manage auth tokens on the server side. This is expected but has privacy/security implications — you should review Membrane's trust, privacy, and data-handling policies before using it with sensitive data.
Persistence & Privilege
The skill does not request persistent/always-on privileges, does not modify other skills or system-wide settings, and has no install-time configuration. Agent autonomous invocation is allowed by default but is not combined with other broad privileges here.
Assessment
This skill is coherent: it instructs you to use the Membrane CLI to integrate with EduMe. Before installing or using it, verify you trust Membrane (check https://getmembrane.com, the @membranehq npm publisher, and their privacy/security docs) because your EduMe connection and API traffic will be proxied through their service. Prefer using npx for one-off commands instead of a global npm -g install, confirm the CLI package authenticity (publisher and repository), and ensure the Membrane account permissions you grant are limited to what's needed for your workflows.Like a lobster shell, security has layers — review code before you run it.
latestvk9770wfw7h446vgw96fpawxp5584ajkm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.