Lucca

v1.0.2

Lucca integration. Manage data, records, and automate workflows. Use when the user wants to interact with Lucca data.

0· 127·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description (Lucca integration) matches the instructions, which exclusively describe using the Membrane CLI to connect to Lucca, list actions, run actions, and proxy API requests. No unrelated services, credentials, or binaries are requested.
Instruction Scope
The SKILL.md instructs the agent/user to install and run the Membrane CLI, perform browser-based login flows, create connections, run actions, and proxy arbitrary Lucca API requests through Membrane. This stays within the Lucca integration scope, but the proxy feature allows arbitrary API calls to the Lucca API (expected for this integration) — be aware that proxy calls run with the privileges of the connected account.
Install Mechanism
This is an instruction-only skill (no install spec), but the runtime instructions tell the user to install @membranehq/cli globally via npm. Installing an npm package (global install) executes third-party code on the machine and carries the usual supply-chain/execution risk; this is expected for a CLI integration but is higher-risk than a purely local/instruction-only skill.
Credentials
The skill declares no required env vars, no secrets, and explicitly recommends using Membrane connections instead of asking for API keys. The requested access (a Membrane account and network access) is proportionate to the stated functionality.
Persistence & Privilege
The skill does not request always:true and does not modify system or other-skill configs. It relies on the user installing and authenticating the Membrane CLI; no elevated platform privileges are requested by the skill itself.
Assessment
This skill appears coherent: it uses the Membrane CLI to access Lucca and requests only a Membrane account and network access. Before installing/using it: 1) Confirm you trust the Membrane project and the repository at https://github.com/membranedev/application-skills (review the CLI source if you can). 2) Understand that running npm install -g @membranehq/cli will execute third-party code on your machine — do this only on systems you control. 3) When creating connections, limit the account permissions used for integrations (principle of least privilege) because proxy calls will run with that account’s privileges. 4) If you need to limit exposure, avoid giving an autonomous agent broad rights to create/run connections or make arbitrary proxy requests. If you want additional assurance, request the skill author to include an install spec that pins a vetted release or provide a link to a specific Membrane CLI release tarball on an official release host.

Like a lobster shell, security has layers — review code before you run it.

latestvk972ary8rd6qk3kzp7vbgcstq9843sag

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments