Human Api
v1.0.0Human API integration. Manage data, records, and automate workflows. Use when the user wants to interact with Human API data.
⭐ 0· 56·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description promise Human API integration and the SKILL.md exclusively documents using the Membrane CLI to connect, list actions, run actions, and proxy requests to Human API. No unrelated credentials, binaries, or system paths are requested.
Instruction Scope
Runtime instructions stay within the scope of connecting to Human API through Membrane: installing the Membrane CLI, logging in, creating connections, discovering actions, running actions, and proxying requests. The doc does not instruct reading arbitrary files, accessing unrelated environment variables, or exfiltrating data to unexpected endpoints. It explicitly advises against asking users for API keys.
Install Mechanism
This is an instruction-only skill (no install spec in the registry). The SKILL.md recommends installing @membranehq/cli globally via npm (npm install -g @membranehq/cli). That is expected for a CLI-based integration, but global npm installs carry standard supply-chain and privilege considerations (ensure you trust the package and its publisher).
Credentials
The skill declares no required environment variables or credentials and relies on Membrane to handle auth and credential refresh. That is proportionate for a third-party-proxied API integration. Be aware that authenticating will create a connection managed by Membrane (server-side).
Persistence & Privilege
The skill does not request always:true, does not alter other skills, and has no install-time components in the registry. Autonomous invocation is allowed by default but this is normal; nothing in the skill grants unusual persistent privileges.
Assessment
This skill is coherent and appears to do what it says: it requires a Membrane account and uses the Membrane CLI to manage Human API connections. Before installing or following the instructions: confirm you trust the Membrane service and the @membranehq/cli npm package (npm global installs have normal supply-chain risk), understand that your Human API data and auth will be routed through Membrane (server-side), and review the permissions/scopes requested when you create the connection. Do not provide unrelated credentials to the skill, and run the CLI install in an environment where you’re comfortable granting global npm binaries.Like a lobster shell, security has layers — review code before you run it.
latestvk971abt93mdqfw0hegjtnp44hs84bstt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.