Okay
v1.0.0Okay integration. Manage data, records, and automate workflows. Use when the user wants to interact with Okay data.
⭐ 0· 31·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Okay integration) match the instructions: all actions are performed via the Membrane CLI and the SKILL.md documents how to discover/connect/run Okay actions. Nothing asked for (no unrelated env vars, no unrelated binaries) is out of scope for an integration.
Instruction Scope
SKILL.md only instructs installing and using the Membrane CLI, logging in via browser, creating connections, listing and running actions, and proxying requests to Okay through Membrane. It does not instruct reading arbitrary system files, pulling unrelated credentials, or sending data to unexpected endpoints.
Install Mechanism
There is no platform install spec, but the runtime instructions recommend installing @membranehq/cli via npm (global install). Installing a third-party CLI is a normal requirement for this integration; npm installs carry the usual supply-chain risk — recommended to prefer npx or review the package source before a global install.
Credentials
The skill declares no required env vars or credentials. SKILL.md explicitly says Membrane handles auth (browser-based login / connections) and advises not to ask users for API keys, which is proportionate for a connector-style integration.
Persistence & Privilege
Skill is instruction-only, not always-installed, and does not request persistent system-level privileges or change other skills' configs. It relies on Membrane for credential management, which is expected for this use case.
Assessment
This skill appears coherent and uses the Membrane CLI to talk to Okay. Before installing or running commands: 1) Review the @membranehq/cli package (npm page and source repo) to confirm you trust the publisher. Consider using npx (one-off) instead of a global npm install to avoid system-wide changes. 2) Be aware that Membrane will broker requests and handle auth server-side — review Membrane's privacy/permissions to understand what data is proxied/stored. 3) When authenticating, the login flow opens a browser and issues connection tokens that grant Membrane access to your Okay account; only proceed if you trust that access. 4) Because the skill is instruction-only, it won't itself read local files or env vars unless you run the recommended CLI commands; exercise the usual caution when running third-party CLIs.Like a lobster shell, security has layers — review code before you run it.
latestvk970armbpds2paz8p46xzm6pa9846s96
License
MIT-0
Free to use, modify, and redistribute. No attribution required.