Humaans
v1.0.0Humaans integration. Manage data, records, and automate workflows. Use when the user wants to interact with Humaans data.
⭐ 0· 54·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Humaans integration) match the runtime instructions (use Membrane CLI to connect to Humaans, list actions, run actions, or proxy requests). The homepage and repository references point to Membrane project resources which is consistent with using Membrane as a proxy for Humaans.
Instruction Scope
SKILL.md confines agent behavior to installing and using the @membranehq/cli and invoking membrane commands (login, connect, action list/run, request). It does not instruct reading unrelated files or environment variables. Note: proxying requests to the Humaans API means employee/hr data will flow through Membrane — this is expected for the stated purpose but is sensitive.
Install Mechanism
There is no formal install spec in the registry (the skill is instruction-only). The doc tells the user to run a global npm install (npm install -g @membranehq/cli). Installing a third‑party npm package globally is common but has moderate risk (it executes code on the host). Verify the npm package and project before installing and prefer non-global or sandboxed environments if possible.
Credentials
The skill declares no required env vars or credentials and instead relies on Membrane's browser-based login flow and connections. That is proportional — Membrane is expected to handle Humaans auth. No unrelated credentials or config paths are requested.
Persistence & Privilege
The skill is not set to always:true and does not persist or modify other skills. It allows normal autonomous invocation (the platform default). Be aware: if the agent is allowed to run membrane commands and a connection exists, it can read or modify HR data via Membrane — this is a powerful capability but consistent with the skill's purpose.
Assessment
This skill appears to do what it says, but take these precautions before installing or using it:
- Verify the @membranehq/cli package and the referenced GitHub repo (check publisher, recent commits, and npm page) before running npm install -g.
- Prefer installing the CLI in a contained environment (non-global, container, or VM) if you are unsure, since npm packages run code on install.
- Humaans holds sensitive employee data — confirm what scope/permissions the Membrane connection requests and only grant least privilege. Review Membrane's privacy/security and audit-log capabilities.
- If you allow the agent autonomous invocation, limit or require confirmation for destructive actions (deletes/updates) so the agent cannot modify HR data without explicit user approval.
- Because the skill is instruction-only, the agent will rely on network access and your Membrane account; do not paste API keys or tokens into chat — follow the described browser login/connection flow.Like a lobster shell, security has layers — review code before you run it.
latestvk971x92demq976t2q66grsmnxn84dpk8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.