Onna
v1.0.0Onna integration. Manage data, records, and automate workflows. Use when the user wants to interact with Onna data.
⭐ 0· 66·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Onna integration) matches the instructions (use Membrane CLI to connect to Onna and run Onna API calls). The homepage and repository point to Membrane-related resources which is consistent with the skill using Membrane as a proxy.
Instruction Scope
SKILL.md only instructs installing and running the Membrane CLI, logging in, creating connections, listing/running actions, and using a proxy to call Onna APIs. It does not request unrelated files, environment variables, or system-wide data beyond standard CLI usage. It explicitly discourages asking the user for API keys.
Install Mechanism
Install instructions use npm to install @membranehq/cli globally (npm install -g). This is a common pattern but does write a binary to the system and pulls code from the public npm registry (moderate risk compared to instruction-only). Users should verify the package and publisher on the npm registry before installing.
Credentials
The skill declares no required environment variables or credentials and the instructions rely on the Membrane login flow rather than asking for secrets. That is proportionate to the stated purpose.
Persistence & Privilege
Skill is instruction-only and not always-enabled. The only persistent change recommended is installing a global CLI binary, which is expected for this workflow but does alter the system. The skill does not request permanent agent privileges or attempt to modify other skill configs.
Assessment
This skill is instruction-only and coherent: it expects you to install the @membranehq/cli npm package and use your Membrane account to connect to Onna. Before installing, verify the @membranehq package and publisher on the npm registry and confirm the repository/homepage match what you expect. Understand that installing with -g will place a CLI binary on your system; if you prefer less system-wide change, consider using npx or a local install. The Membrane CLI will open a browser for authentication and will act as a proxy to Onna (so you normally won't hand API keys to this skill). If you have strict security requirements, review the CLI source code in the linked repository and the Membrane privacy/security documentation before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk9755j0z6jtd0fdjxc0g7cc1p584abrp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.