Lano
v1.0.0Lano integration. Manage data, records, and automate workflows. Use when the user wants to interact with Lano data.
⭐ 0· 61·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description (Lano integration) match the instructions: it teaches the agent to install and use the Membrane CLI to connect to Lano, list actions, run actions, and proxy requests. Requiring a Membrane account and network access is coherent with that purpose. There are no unrelated environment variables or config paths requested.
Instruction Scope
SKILL.md stays on-topic: it tells the agent to install/run the Membrane CLI, perform OAuth-style browser login, discover connectors/actions, run actions, and optionally forward proxied API calls. It does not instruct reading arbitrary local files, scanning other services, or exfiltrating data outside the Membrane/Lano flow.
Install Mechanism
There is no built-in install spec; the doc instructs users to run `npm install -g @membranehq/cli` (and alternately uses npx in examples). This is a normal way to install a CLI but does pull code from the public npm registry — a moderate, expected risk. Using npx avoids installing globally. No downloads from obscure URLs or archive extraction are present.
Credentials
The skill requests no environment variables, credentials, or config paths. It explicitly advises against asking users for API keys and relies on Membrane to manage auth, which is proportionate for the integration described.
Persistence & Privilege
The skill is instruction-only, has no install-time persistence, and is not marked always:true. It can be invoked by the agent (default behavior) but does not request elevated or permanent privileges over the agent or other skills.
Assessment
This skill is coherent: it uses the Membrane CLI to access Lano and asks for a Membrane account and network access. Before installing, confirm you trust the Membrane project and the @membranehq/cli npm package (review its npm page/repo). Prefer using npx when possible instead of a global npm install to avoid placing a new binary on your system. Expect the skill to open a browser for OAuth-style login (or produce a URL/code for headless flows). Because the agent can run this skill autonomously by default, only enable it if you are comfortable with the agent performing Lano actions on your behalf via your Membrane connection.Like a lobster shell, security has layers — review code before you run it.
latestvk97a2ddxpk8b0ztm0epk00eyxh84bgqt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
