Grouparoo
v1.0.0Grouparoo integration. Manage data, records, and automate workflows. Use when the user wants to interact with Grouparoo data.
⭐ 0· 69·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Grouparoo integration) aligns with the instructions: discover connectors/actions and proxy API calls to Grouparoo via the Membrane CLI. No unrelated requirements (no unrelated env vars, binaries, or config paths) are requested.
Instruction Scope
SKILL.md provides explicit CLI commands to install the Membrane CLI, log in, create connections, list actions, run actions, and proxy requests. It does not instruct reading local files, harvesting environment variables, or sending data to unexpected endpoints beyond Membrane/Grouparoo. Instructions are scoped to the stated integration purpose.
Install Mechanism
There is no automatic install spec, but the doc tells the user to run `npm install -g @membranehq/cli` (and uses `npx` in examples). Installing a global npm package is a reasonable way to get a CLI, but it requires trusting the npm package and its maintainers (postinstall scripts could run). Verify package provenance (npm page, GitHub repo) before installing or use npx/containerized execution to reduce risk.
Credentials
The skill requests no environment variables or local credentials. Instead it routes auth through Membrane (browser login / connection flow). This is coherent but means user data and credentials will be handled by Membrane’s service — users must trust Membrane with proxied API requests and stored credentials/refresh tokens.
Persistence & Privilege
The skill does not request persistent or elevated agent privileges (always:false). It is instruction-only and does not modify other skills or system-wide config. Model invocation and user-invocation defaults are normal and appropriate here.
Assessment
This skill appears to do what it says: use the Membrane CLI to connect to Grouparoo and proxy requests. Before using it, verify the @membranehq/cli package and the Membrane service: check the npm package page and the GitHub repository referenced in the SKILL.md, review Membrane’s privacy/security docs, and confirm you are comfortable having a third‑party service handle and proxy your Grouparoo data and credentials. To reduce risk, consider using `npx` or running the CLI in a disposable/containerized environment rather than installing globally, and avoid pasting secrets into shells or third‑party prompts outside the documented login flow.Like a lobster shell, security has layers — review code before you run it.
latestvk973s68rj4behmj3rgmh3q2325844e87
License
MIT-0
Free to use, modify, and redistribute. No attribution required.