ClawHub

Gooddata

v1.0.2

GoodData integration. Manage data, records, and automate workflows. Use when the user wants to interact with GoodData data.

⭐ 0· 63·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill's name/description (GoodData integration) match the instructions: all actions use the Membrane CLI and Membrane's GoodData connector. There are no unexpected credentials, binaries, or unrelated capabilities requested.
✓
Instruction Scope
SKILL.md only directs the agent to install/use the Membrane CLI, create/list connections, run pre-built actions, and proxy requests to the GoodData API via Membrane. It does not instruct reading local files, environment variables, or transmitting unrelated data.
ℹ
Install Mechanism
The install step recommends `npm install -g @membranehq/cli` (public npm). This is a standard, moderate-risk install mechanism for CLI tools — expected for a CLI-based integration — but installing global npm packages should be done from trusted publishers and reviewed before use.
✓
Credentials
The skill declares no required environment variables or credentials and explicitly recommends letting Membrane handle auth. There is no disproportionate request for secrets or unrelated credentials.
✓
Persistence & Privilege
The skill is instruction-only, has no install-time persistence spec, does not set always:true, and does not request system config paths or modify other skills' configuration.
Assessment
This skill is coherent and appears to simply teach how to use the Membrane CLI to access GoodData. Before installing: (1) confirm you trust the Membrane project/publisher (check https://www.npmjs.com/package/@membranehq/cli and the repo), (2) prefer using `npx @membranehq/cli@latest` if you want to avoid a global npm install, (3) expect the CLI to open a browser for authentication—do not paste secrets into chat prompts, and (4) review what specific actions or proxied API calls you run (they can interact with your GoodData workspace). If you have strict security policies, verify the package checksum and review Membrane's privacy/permission docs before proceeding.

Like a lobster shell, security has layers — review code before you run it.

latestvk975bdkhegfpwzx98f988q23d9843g08

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments