Elmo
v1.0.0ELMO Software integration. Manage data, records, and automate workflows. Use when the user wants to interact with ELMO Software data.
⭐ 0· 25·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (ELMO Software integration) aligns with the instructions: they explain using Membrane CLI to connect to ELMO and run actions or proxy API requests. Nothing in the SKILL.md asks for unrelated cloud keys or unrelated services.
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, running it to create connections, listing actions, running actions, and proxying requests to ELMO. The skill does not instruct the agent to read unrelated files, environment variables, or send data to endpoints outside of Membrane/ELMO. It does assume network access and interactive browser-based auth (with a headless fallback).
Install Mechanism
There is no formal install spec, but the SKILL.md tells users to run `npm install -g @membranehq/cli` or use `npx`. Installing a global npm package is a common approach but has more system impact than an instruction-only skill; the SKILL.md does not declare that 'npm' must be present. The referenced package is on the public npm registry — verify the package and publisher before global install.
Credentials
No environment variables, credentials, or config paths are requested by the skill. The instructions explicitly tell users not to share API keys and to let Membrane manage credentials via browser-based connections, which matches the described workflow.
Persistence & Privilege
The skill does not request always:true or attempt to modify other skills/config. It is user-invocable only and does not declare autonomous persistence or elevated platform privileges.
Assessment
This skill is an instructions-only integration that relies on the third-party Membrane CLI to access your ELMO data. Before following the steps: (1) verify the @membranehq/cli npm package and its publisher (review the npm page and the GitHub repo linked in the SKILL.md), (2) prefer using npx or a non-global install if you want to avoid modifying system-wide npm state, (3) be aware that creating a Membrane connection grants Membrane’s service access to your ELMO tenant — confirm you trust that service and its privacy/security policies, and (4) do not paste credentials into chat; follow the browser-based auth flow described. If you want higher assurance, request the skill author sign the package or provide a reproducible install manifest.Like a lobster shell, security has layers — review code before you run it.
latestvk9716wmdrx4zsnr6ft5fn1za2n849zwd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.