Herald
v1.0.0Herald integration. Manage data, records, and automate workflows. Use when the user wants to interact with Herald data.
⭐ 0· 50·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions: the SKILL.md explains how to install and use the Membrane CLI to connect to Herald, list actions, run actions, and proxy requests. Requested capabilities (network + Membrane account) are reasonable for this integration. One minor oddity: the 'Official docs' link points to a Phabricator docs URL which may be unrelated to the Membrane project—this looks like a documentation mix-up but does not change the core capability.
Instruction Scope
Instructions only direct the agent to install and run the Membrane CLI, perform login via browser, discover connectors/actions, run actions, and proxy requests. There are no instructions to read arbitrary files, access unrelated env vars, or exfiltrate data to third-party endpoints beyond Membrane/Herald.
Install Mechanism
The skill is instruction-only (no install spec), but it tells the user to install @membranehq/cli via npm install -g. Installing a global npm package is expected for CLI usage but has normal risk (writes to disk, modifies PATH). Consider using npx to avoid global install if you prefer.
Credentials
The skill declares no required environment variables or credentials and advises using Membrane connections (server-managed auth). It does not ask for unrelated secrets. This is proportionate to the stated integration purpose.
Persistence & Privilege
Skill does not request always:true or system-wide configuration changes. It is user-invocable and allows normal autonomous invocation by the agent (default), which is expected for skills; nothing here indicates elevated or persistent privilege.
Assessment
This skill is a guide for using the Membrane CLI to access Herald and appears internally consistent. Before installing: (1) Verify you trust the @membranehq/cli npm package and the Membrane service (review their docs and privacy/security posture); (2) prefer npx or a local install if you don't want a global npm package installed; (3) be aware the CLI login opens a browser (or uses a copy/paste flow in headless environments) and that Membrane will proxy requests to the target service — review what data will be sent to Membrane; (4) note the SKILL.md's 'Official docs' link seems unrelated (Phabricator) — confirm that the connector you intend to use is the correct Herald service. Other than these routine checks, the skill does not request unexplained credentials or system access.Like a lobster shell, security has layers — review code before you run it.
latestvk972qvcrmpv5yt0v1xa5cg07r184eb1h
License
MIT-0
Free to use, modify, and redistribute. No attribution required.