Ngrok
v1.0.2Ngrok integration. Manage data, records, and automate workflows. Use when the user wants to interact with Ngrok data.
⭐ 0· 103·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Ngrok integration) matches the runtime instructions: the SKILL.md shows how to use the Membrane CLI to connect to Ngrok, list connections, run actions, and proxy API requests. Nothing requested (no env vars, no config paths) is unrelated to the stated purpose.
Instruction Scope
Instructions are narrowly scoped to installing/using the Membrane CLI, performing login (browser flow), creating connections, listing and running actions, and proxying requests to Ngrok. The SKILL.md does not instruct reading unrelated files, harvesting environment variables, or sending data to unexpected endpoints. It does require network access and interactive browser auth, which is consistent with the workflow.
Install Mechanism
The registry has no formal install spec, but the SKILL.md directs users to install the @membranehq/cli via 'npm install -g' (or use npx). Installing a global npm CLI is a standard but non-trivial action (supply-chain risk and permissions). The package is on the public npm registry; verify provenance before global install.
Credentials
No environment variables or local credentials are required by the skill; authentication is delegated to Membrane via an interactive browser flow. This is proportionate to the purpose, but it does require trusting Membrane to hold/manage Ngrok credentials and to proxy API calls.
Persistence & Privilege
The skill does not request always:true and has no install-time modifiers in the registry. It's instruction-only and does not modify other skills or system-wide agent settings. Autonomous invocation is allowed by default but is not combined with other high-risk requests.
Assessment
This skill appears internally consistent: it uses Membrane's CLI to talk to Ngrok and does not ask for unrelated secrets. Before installing or following the instructions, verify the @membranehq/cli package and the homepage/repository (check npm publisher, GitHub repo, and release history). Installing a global npm package grants that package system-level execution ability — consider using npx, a container, or an isolated environment if you are cautious. Remember you are trusting Membrane to manage and proxy your Ngrok credentials and API calls; if you need strict control over keys or auditing, review Membrane's security/privacy docs or use your own direct Ngrok integration instead.Like a lobster shell, security has layers — review code before you run it.
latestvk97dn642n2n5s8kmkt78916rs98421wz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.