Gatekeeper
v1.0.2Gatekeeper integration. Manage Users, Organizations. Use when the user wants to interact with Gatekeeper data.
⭐ 0· 114·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (Gatekeeper integration) aligns with the instructions (use Membrane CLI to connect to Gatekeeper). Minor inconsistency: the SKILL.md's "Official docs" link points to Apple's macOS Gatekeeper docs (developer.apple.com) which is unrelated to the described SaaS Gatekeeper; this looks like a documentation error but does not change the core capability alignment.
Instruction Scope
All runtime instructions stay within the stated purpose: install the Membrane CLI, run membrane login, create/connect connectors, list actions, and proxy requests to Gatekeeper. The skill does not instruct reading local secrets or unrelated files. It does instruct running global npm install (user action).
Install Mechanism
The registry has no install spec (instruction-only), but the SKILL.md tells users to run `npm install -g @membranehq/cli`. That is a reasonable, user-initiated install step for this integration but does modify the host (global npm). Verify the package and maintainer on the npm registry before installing.
Credentials
The skill declares no required environment variables, credentials, or config paths and explicitly advises not to ask users for API keys. It delegates auth to Membrane, which is proportionate for the described proxy-based integration.
Persistence & Privilege
The skill is not always-enabled, does not request persistent system-wide privileges, and contains no instructions to modify other skills or agent settings. It is an on-demand, user-invoked instruction-only integration.
Assessment
This skill is coherent: it uses the Membrane CLI to connect to Gatekeeper and does not request unrelated credentials. Before installing/use: (1) confirm you trust Membrane as a proxy — Membrane will handle and proxy your Gatekeeper credentials, so review their security/privacy and consider least-privilege connectors; (2) verify the npm package name and maintainer for @membranehq/cli on the official npm registry before running a global install; (3) be aware that the SKILL.md has an unrelated Apple docs link (likely a copy/paste error) — check Membrane/Gatekeeper official docs for correct API details; (4) if you prefer not to install global tooling on a production host, run the CLI in an isolated environment (container/VM) or avoid using the skill. If you want lower risk, ask the publisher/source for verification or a signed release before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk974gg231wamxyynwd0tr36qeh843b8c
License
MIT-0
Free to use, modify, and redistribute. No attribution required.