Forgerock
v1.0.2ForgeRock integration. Manage data, records, and automate workflows. Use when the user wants to interact with ForgeRock data.
⭐ 0· 90·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (ForgeRock integration) aligns with the instructions which all focus on using the Membrane CLI to connect to and operate on ForgeRock resources. Required artifacts (Membrane account, network) are reasonable for this purpose.
Instruction Scope
SKILL.md confines runtime actions to Membrane CLI commands (login, connection, action run, request). It does not instruct reading local files or unrelated env vars. Note: the skill explicitly recommends using the Membrane proxy to send arbitrary API requests to ForgeRock — this is within scope but gives broad ability to read/modify identity data depending on the connected account's privileges.
Install Mechanism
The skill is instruction-only (no automatic install). It tells users to install @membranehq/cli via npm -g, which is a normal instruction but does require trusting an external npm package. Because installation is manual (not an install spec), nothing is written automatically by the skill itself.
Credentials
No environment variables, secrets, or config paths are requested by the skill. The SKILL.md specifically advises against asking users for API keys and delegates auth to Membrane, which is proportionate to the described workflow.
Persistence & Privilege
The skill is not always-enabled and is user-invocable. It does not request persistent system privileges or modify other skills' configurations.
Assessment
This skill appears coherent and does what it says: it uses Membrane's CLI to integrate with ForgeRock. Before using it, verify you trust the @membranehq/cli npm package (check the publisher, package page, and repository), be aware you'll need a Membrane account and to authenticate via a browser flow, and limit the Membrane connection's permissions to the minimum necessary because the proxy/requests feature can access or change sensitive identity data if the connected account has broad privileges. Since the skill only provides instructions (it doesn't auto-install), you control whether/when the CLI is installed and run.Like a lobster shell, security has layers — review code before you run it.
latestvk973pndvm303zzp237xyvzgs2n842m17
License
MIT-0
Free to use, modify, and redistribute. No attribution required.