Gradeus
v1.0.2Grade.us integration. Manage Organizations. Use when the user wants to interact with Grade.us data.
⭐ 0· 99·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is an instruction-only integration that uses the Membrane CLI to talk to Grade.us. Requesting the Membrane CLI and a Membrane account aligns with the described purpose; there are no unrelated credentials, binaries, or config paths requested.
Instruction Scope
SKILL.md focuses on using the Membrane CLI (login, creating connections, listing actions, proxying requests) and the Grade.us API. It does not instruct reading unrelated files or environment variables, nor does it ask to exfiltrate data to unexpected endpoints. The instructions are specific rather than open-ended.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but the doc tells the user to run `npm install -g @membranehq/cli`. That is an expected dependency for the described workflow, but installing a global npm package does introduce the usual supply-chain/trust considerations (verify publisher, version, and source).
Credentials
The skill declares no required environment variables or primary credential. It explicitly delegates credential management to Membrane and instructs not to ask users for API keys—this is proportionate for a connector that relies on Membrane to store auth.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and is user-invocable. It does require network access and a Membrane account (documented), which is expected for remote API integrations.
Assessment
This skill appears internally consistent: it uses Membrane's CLI to access Grade.us and does not ask for unrelated secrets. Before installing, verify the Membrane CLI package (@membranehq/cli) on the npm registry and its GitHub repository (publisher, recent releases, and README) to ensure you're installing the official client. Consider installing the CLI in a controlled environment (container or VM) if you are cautious about global npm packages. Remember that using the skill will cause data to flow through Membrane's service to Grade.us, so confirm that this routing is acceptable for any sensitive data you plan to access or transmit.Like a lobster shell, security has layers — review code before you run it.
latestvk979hdb4jj8ph0y0za0vhszfwn843t5h
License
MIT-0
Free to use, modify, and redistribute. No attribution required.