Novu
v1.0.2Novu integration. Manage data, records, and automate workflows. Use when the user wants to interact with Novu data.
⭐ 0· 78·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Novu integration) matches the instructions: all runtime steps use the Membrane CLI to discover connectors, create a Novu connection, run actions, or proxy requests to Novu's API. Nothing requested is unrelated to integrating with Novu.
Instruction Scope
SKILL.md is an instruction-only workflow that tells the agent to install and call the Membrane CLI, run discovery commands, create connections, run actions, and proxy API requests. It does not ask the agent to read unrelated files, environment variables, or exfiltrate data. It does require network access and a Membrane account (documented in the file).
Install Mechanism
There is no formal install spec in the registry; the skill instructs users to run `npm install -g @membranehq/cli`. That is a common way to obtain a CLI but does execute third-party package code from the npm registry — a moderate-trust operation. The skill does not provide an archive URL or other high-risk install source.
Credentials
The skill declares no required env vars or local credentials. Authentication is delegated to Membrane (browser login/connector flow). This is proportional to the stated purpose, but it does require trusting Membrane with Novu credentials and proxied API requests.
Persistence & Privilege
The skill is not set to always: true and uses the default (agent-invocable, autonomous invocation allowed). That is normal. The skill does not request system-wide config changes or access to other skills' credentials.
Assessment
This skill delegates Novu access to the Membrane service and asks you to install the @membranehq/cli from npm. Before installing or connecting: (1) verify you trust Membrane (review getmembrane.com, the CLI package on npm, and the referenced GitHub repo); (2) be aware installing npm packages globally runs code on your machine — prefer scoped installs or inspect the package if unsure; (3) understand that Membrane will hold your Novu credentials and can proxy arbitrary API calls, so only grant the connector the minimum privileges needed (use a test/limited Novu account where possible); (4) monitor and audit connections you create and revoke them when not needed. If you want, review the Membrane CLI repository and the npm package metadata before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk97cadbtb3c34vvmyt4xv9kgp1842n6d
License
MIT-0
Free to use, modify, and redistribute. No attribution required.