Mambu
v1.0.0Mambu integration. Manage data, records, and automate workflows. Use when the user wants to interact with Mambu data.
⭐ 0· 60·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name and description (Mambu integration) align with the runtime instructions: all actions are performed via the Membrane CLI which proxies requests to Mambu. Requiring the Membrane CLI is consistent with the documented approach (the skill explicitly notes Membrane handles auth). There are no unrelated environment variables, binaries, or config paths requested.
Instruction Scope
SKILL.md instructs the agent/operator to install and use the @membranehq CLI, login via browser, create/choose a Membrane connection, list and run actions, or proxy raw requests. The instructions do not ask the agent to read unrelated local files or secrets. Important caveat: using this skill means Mambu requests and request payloads will transit through Membrane (the skill repeatedly recommends letting Membrane handle credentials); users should be aware that their data and API calls go through a third-party service.
Install Mechanism
The skill is instruction-only (no install spec in registry), but SKILL.md tells users to install @membranehq/cli via npm (global) or use npx. Installing a public npm CLI is a common approach but has moderate risk compared with no install; users should verify the package source and prefer npx or isolated environments if they don't want a global install.
Credentials
The registry metadata declares no required environment variables or credentials and SKILL.md explicitly says not to ask users for API keys and to use Membrane connections. Requested access is proportional: authentication is handled by Membrane rather than by asking for direct Mambu secrets in the skill.
Persistence & Privilege
The skill is not marked always:true, does not request persistent system-wide changes in the registry metadata, and is instruction-only. It does require the user to install a CLI if they want to run actions, but it does not request elevated agent privileges or modify other skills' configs.
Assessment
This skill appears to do what it says: it uses the Membrane service/CLI to proxy calls to Mambu rather than calling Mambu directly. Before installing or using it, consider: (1) You will be installing/using the @membranehq npm CLI — prefer npx or an isolated environment if you don't want a global package. (2) API calls and any data you send will transit via Membrane (a third-party service). Review Membrane's privacy/security policies and verify the @membranehq package and the repository if you need assurance. (3) Avoid sending highly sensitive data until you confirm the account/tenant and data-handling practices. If any automated/unattended agent will run this skill, ensure you are comfortable granting that agent network access and the ability to invoke the Membrane CLI.Like a lobster shell, security has layers — review code before you run it.
latestvk97739v1403tsby2r8vy1g10ch844n28
License
MIT-0
Free to use, modify, and redistribute. No attribution required.