Loomio
v1.0.2Loomio integration. Manage Organizations. Use when the user wants to interact with Loomio data.
⭐ 0· 129·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Loomio integration) match the instructions: all actions are performed via the Membrane CLI and Membrane's proxy. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md instructs the agent/user to install and use the Membrane CLI, create a Membrane connection to Loomio, list actions, run actions, or proxy raw Loomio API requests via Membrane. It does not ask to read unrelated files, export secrets, or contact unexpected endpoints.
Install Mechanism
There is no automated install spec in the skill bundle (instruction-only), which is low-risk. The instructions tell users to run `npm install -g @membranehq/cli` or use `npx ...` — this is a reasonable expectation for using the Membrane CLI but does require installing third-party npm code globally; that's a moderate operational risk and worth verifying the package source/version before installing.
Credentials
The skill declares no required environment variables or credentials and explicitly instructs you not to ask users for API keys. Authentication is delegated to Membrane, which is consistent with the stated design.
Persistence & Privilege
The skill is not always-enabled and does not request persistent system privileges or modify other skills/config. Autonomous invocation is allowed by platform default but is not combined with other concerning privileges.
Assessment
This skill is an instruction-only integration that expects you to use the Membrane CLI and a Membrane account to talk to Loomio. Before installing or running commands: (1) confirm @membranehq/cli is the official package and review its npm page and code or pinned release version, (2) prefer running the CLI with npx or a local install rather than a global npm install if you want to avoid modifying global state, (3) understand that Membrane will proxy API requests to Loomio and will see the connection's data — only create connections with the appropriate scopes and to trusted accounts, and (4) be aware the agent can invoke the skill when asked (platform default) but the skill does not request extra system permissions. If you need higher assurance, ask the skill author for a signed release link or a reproducible installation procedure.Like a lobster shell, security has layers — review code before you run it.
latestvk97d51ts8ta9j01f94wsd14pts843nab
License
MIT-0
Free to use, modify, and redistribute. No attribution required.