Howuku
v1.0.2Howuku integration. Manage Organizations, Users, Goals, Filters. Use when the user wants to interact with Howuku data.
⭐ 0· 102·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Howuku integration) matches the instructions: all operations are performed via the Membrane CLI and Membrane connections to Howuku. Required tools and actions (connector search, connect, action run, proxy requests) are expected for this purpose.
Instruction Scope
SKILL.md instructs only CLI operations (installing and using the Membrane CLI, logging in, creating connections, running actions, proxying requests). It does not instruct reading unrelated files, environment variables, or exfiltrating data outside the Membrane/Howuku flow.
Install Mechanism
The skill requires installing the @membranehq/cli npm package globally (npm install -g). This is proportional to the CLI-based workflow but carries the usual npm-global risk (package runs install scripts, requires trust). No downloads from arbitrary URLs or archive extraction are used.
Credentials
No environment variables, credentials, or config paths are requested by the skill. Authentication is delegated to Membrane (browser flow or headless code exchange), which aligns with the stated design and avoids local secret handling.
Persistence & Privilege
The skill is instruction-only with default invocation settings (not always:true). It does not request persistent system-level changes or modify other skills' configurations.
Assessment
This skill is coherent: it uses the Membrane CLI to access Howuku and does not ask for unrelated secrets. Before installing, verify you trust the @membranehq/cli package (check its npm and GitHub pages, reviews, and publisher), because npm -g installs run code on your machine. If you prefer less risk, run the CLI in an isolated environment/container or inspect the package source. Also be aware that the agent can invoke the skill automatically by default; if you want to restrict autonomous actions, disable model invocation for the skill in your agent settings.Like a lobster shell, security has layers — review code before you run it.
latestvk97732vch6x6g26tscqkys3vf5843zw5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.