Lessonly
v1.0.2Lessonly integration. Manage data, records, and automate workflows. Use when the user wants to interact with Lessonly data.
⭐ 0· 69·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Lessonly integration) matches the SKILL.md: it instructs using the Membrane CLI to connect to Lessonly, list actions, run actions, and proxy API requests. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Runtime instructions stay on-topic: install the Membrane CLI, run membrane login, create/list connections, run actions, and proxy requests. The instructions do not ask to read arbitrary local files or unrelated environment variables, nor to transmit data to unexpected endpoints other than Membrane (the documented proxy).
Install Mechanism
The skill is instruction-only (no install spec), but directs the user to install @membranehq/cli via npm (-g) or use npx. Using a public npm package is normal, but global npm installs require privileges and depend on trusting the package and its publisher (repo and homepage are provided).
Credentials
The skill requests no environment variables or local credentials. It explicitly instructs not to ask users for API keys and relies on Membrane to handle auth, which is proportionate for a connector-based integration. Note: using Membrane delegates credential storage/refresh to their service.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings, and has no install-time components in the bundle. It runs via the Membrane CLI under the user's control.
Assessment
This skill is coherent, but before installing follow these precautions: (1) Understand that you'll create a Membrane connection via an OAuth/browser flow — Membrane will hold tokens and proxy requests to Lessonly, so only proceed if you trust Membrane. (2) Prefer using npx to avoid a global npm install, or review @membranehq/cli source and npm package metadata before installing. (3) Limit the Lessonly account permissions used for the connection to the minimum needed. (4) Review Membrane's privacy/security docs (and your org policy) if connecting sensitive data.Like a lobster shell, security has layers — review code before you run it.
latestvk978cwwvj9gmhz0jdctt1y1pj1842n7d
License
MIT-0
Free to use, modify, and redistribute. No attribution required.