Humi
v1.0.2Humi integration. Manage data, records, and automate workflows. Use when the user wants to interact with Humi data.
⭐ 0· 76·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description (Humi integration) lines up with the runtime instructions (use Membrane to connect to Humi). Minor inconsistency: the registry metadata lists no required binaries, but the SKILL.md expects the Membrane CLI to be installed (npm install -g @membranehq/cli). This is a small documentation mismatch rather than a functional mismatch.
Instruction Scope
SKILL.md limits actions to installing/using the Membrane CLI, creating/listing connections, running actions, and proxying requests to Humi. It does not instruct reading unrelated host files or asking for unrelated environment variables or secrets.
Install Mechanism
There is no platform install spec (skill is instruction-only). The instructions tell the user to install @membranehq/cli via npm (global install or npx). npm is a common registry, but a global npm install modifies the host environment and requires user consent — the skill does not bundle or perform the install itself.
Credentials
The skill requests no environment variables or credentials; it explicitly directs users to use Membrane connections rather than sharing API keys. Requiring a Membrane account (and thus Membrane-managed credentials) is proportional to the described function.
Persistence & Privilege
The skill does not request persistent/always-on privileges (always: false) and does not ask to modify other skills or system-wide settings. Autonomous invocation is allowed by platform defaults, but that is not combined with other concerning signals here.
Assessment
This skill appears coherent: it uses the Membrane CLI to manage Humi connectors and explicitly avoids asking for raw API keys. Before installing or following the SKILL.md steps: (1) verify the @membranehq/cli package on npm is the official package and that the homepage/repo links match what you expect, (2) understand that installing with npm install -g modifies your system and requires permission, (3) be aware that granting Membrane access to Humi data means Membrane's servers (and any connectors you authorize) can access that HR data—only proceed if you trust Membrane/getmembrane.com and the connector owner, and (4) confirm the Membrane CLI is acceptable in your environment (some orgs restrict global npm installs). No regex scan findings were present, but that is expected because this is an instruction-only skill.Like a lobster shell, security has layers — review code before you run it.
latestvk974n6rdkzt7qevja0kvt7y25s843tcp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.