Optimoroute
v1.0.2OptimoRoute integration. Manage Organizations. Use when the user wants to interact with OptimoRoute data.
⭐ 0· 119·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with OptimoRoute via Membrane and the SKILL.md consistently instructs use of the Membrane CLI and Membrane-hosted actions/proxy. However, the metadata lists no required binaries or env vars while the instructions require the 'membrane' CLI (and npm/npx to install it) and network access — a minor mismatch between declared requirements and actual runtime needs.
Instruction Scope
Instructions stay on-topic: they walk the agent/user through installing Membrane CLI, performing login flows, creating/using connections, discovering and running actions, and using Membrane's request proxy to call OptimoRoute endpoints. They do not instruct reading unrelated files, harvesting system credentials, or sending data to unexpected endpoints beyond Membrane/OptimoRoute.
Install Mechanism
There is no formal install spec in the skill bundle (it's instruction-only). The SKILL.md tells users/agents to run 'npm install -g @membranehq/cli' or use 'npx' — this is a normal approach but it requires network access and may require elevated permissions (global npm install). Because the skill asks you to install third-party CLI tooling at runtime (not provided by the skill bundle), you should verify the package and trust the source before installing.
Credentials
The skill does not request any environment variables, secrets, or config paths in metadata. The instructions explicitly advise against asking users for API keys and rely on Membrane-managed connections. This is proportionate for a connector-style integration.
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-wide changes beyond suggesting installation of a CLI. It does not attempt to modify other skills or system agent settings in the provided instructions.
Assessment
This skill appears to be what it says: an OptimoRoute integration that uses the Membrane CLI. Before installing or letting an agent run these commands: 1) Confirm you trust Membrane (@membranehq/cli) — Membrane will proxy API calls and therefore can see requests and responses. 2) Be aware 'npm install -g' may need admin privileges and installs a global binary; consider using npx or installing in a controlled environment. 3) The skill uses a browser-based login flow (or a headless code flow) — ensure you are comfortable completing that flow. 4) If you prefer, run the membrane commands yourself and review outputs rather than granting an agent autonomous access. If you need additional assurance, ask for the exact Membrane package version and the Membrane privacy/security docs before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk97dxqzx4phfr9cwa3e16wswpn842ph9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.