Mode
v1.0.2Mode integration. Manage Organizations. Use when the user wants to interact with Mode data.
⭐ 0· 143·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Mode integration) match the instructions: all actions are performed via the Membrane CLI/proxy to access Mode. No unrelated environment variables, binaries, or configuration paths are requested.
Instruction Scope
SKILL.md instructs the agent/operator to install and run the Membrane CLI and to create connections, list actions, run actions, and proxy arbitrary Mode API requests via Membrane. This is expected for a Mode integration, but the proxy command can execute arbitrary requests to Mode (expected functionality — not out-of-scope). The instructions do not ask the agent to read local files or unrelated secrets.
Install Mechanism
The skill itself has no install spec (instruction-only). SKILL.md recommends installing @membranehq/cli with npm -g or using npx; this is an external action by the user/operator rather than an automatic install. Verify the npm package and avoid running global installs as an untrusted user or root.
Credentials
No environment variables, credentials, or config paths are required by the skill. The instructions explicitly recommend letting Membrane handle credentials rather than prompting for API keys, which is proportionate to the described purpose.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and has no install-time persistence. It relies on Membrane session-based authentication initiated via browser-based login — no long-lived local credentials are introduced by the skill itself.
Assessment
This skill is an instruction-only helper that tells you how to use the Membrane CLI to access Mode. Before using it: (1) Confirm you trust Membrane (getmembrane.com) and review the @membranehq/cli npm package (publisher, downloads, code) before installing globally. (2) Be aware Membrane acts as a proxy and will be granted access to Mode data when you create a connection — only authorize accounts you trust. (3) Avoid running global npm installs as root; use least-privilege and sandboxed environments where possible. (4) In headless or automated environments, protect any one-time codes/URLs printed during login so they are not exposed to logs or third parties.Like a lobster shell, security has layers — review code before you run it.
latestvk97dq4qbm9xb0m10s7wkyf1t5d843bz3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.