Kodagpt
v1.0.2KodaGPT integration. Manage Organizations. Use when the user wants to interact with KodaGPT data.
⭐ 0· 126·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is explicitly a Membrane-based integration for KodaGPT and all runtime steps use the Membrane CLI and account. One small mismatch: registry metadata lists no required binaries, but the SKILL.md expects the 'membrane' CLI to be installed and available (npm install -g @membranehq/cli). This is explainable but should be reflected in metadata.
Instruction Scope
Instructions are focused on installing the Membrane CLI, authenticating, listing/connecting actions, running actions, and proxying API requests through Membrane. They do not instruct reading local files, accessing unrelated environment variables, or exfiltrating data beyond the expected Membrane proxy usage.
Install Mechanism
The skill is instruction-only (no install spec). It tells users to install @membranehq/cli via npm -g, which is a public npm package—this is a typical mechanism but the skill metadata did not list the binary dependency. Installing a global CLI will modify the host environment; users should review the package source before installing.
Credentials
The skill requests no environment variables or credentials in metadata and relies on Membrane to handle auth via browser flows. That aligns with the guidance in SKILL.md (''let Membrane handle credentials'').
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and declares no config paths. It requires an interactive login to Membrane but does not request persistent elevated platform privileges.
Assessment
This skill is a wrapper for the Membrane CLI to manage KodaGPT via Membrane. Before installing/use: (1) confirm you trust @membranehq/cli on the npm registry (review its npm page and repository), (2) be aware installing it globally will add a binary to your system PATH, (3) understand that actions like delete-content or update-content are powerful—ensure the Membrane account you use has appropriate permissions, and (4) Membrane will proxy requests and hold auth on your behalf, so review Membrane's privacy/security docs if you have sensitive data. Also note the skill metadata omitted the required 'membrane' CLI entry; expect to install that binary to use this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97460ybhh4xzpcs9m5365rzks8423qv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.