ClawHub

Mosaicml

v1.0.2

MosaicML integration. Manage data, records, and automate workflows. Use when the user wants to interact with MosaicML data.

⭐ 0· 94·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The SKILL.md clearly implements a MosaicML integration via the Membrane CLI (membrane). The registry metadata declares no required binaries or credentials, but the instructions require installing and using the Membrane CLI — a minor inconsistency (missing declared required binary) but otherwise consistent with the stated purpose.
✓
Instruction Scope
Instructions are limited to installing/using the Membrane CLI, creating a connection, listing actions, running actions, and proxying requests to MosaicML. They do not instruct reading unrelated files, exporting secrets, or contacting destinations aside from Membrane/MosaicML.
ℹ
Install Mechanism
This is an instruction-only skill (no install spec). It asks the user to install @membranehq/cli via npm (-g). That is a common install path but carries the usual trust considerations for global npm packages; the skill itself does not download arbitrary code.
✓
Credentials
The skill declares no required env vars or credentials. Authentication is performed via Membrane's browser-based OAuth flow (or headless completion). No unrelated credentials or config paths are requested.
✓
Persistence & Privilege
The skill is not marked always:true and does not request special system persistence. It permits normal autonomous invocation (disable-model-invocation is false), which is the platform default and expected for usable skills.
Assessment
This skill is instruction-only and asks you to install the Membrane CLI (npm install -g @membranehq/cli) and authenticate via browser to create a MosaicML connection. Before installing, verify the npm package and Membrane project (publisher, homepage, and repository) so you trust the proxying service; global npm installs have system-wide reach, so consider using a scoped or isolated environment. Note the metadata omitted declaring the 'membrane' binary requirement — the SKILL.md requires it. When authenticating, review the OAuth scopes granted to Membrane (it will be able to act on your MosaicML account through the proxy). If you need stronger assurance, test in a limited account or sandbox and inspect Membrane's privacy/security docs before proceeding.

Like a lobster shell, security has layers — review code before you run it.

latestvk978zd8cngm0y7j00xbc0txb0s842gxa

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments