Paigo
v1.0.2Paigo integration. Manage data, records, and automate workflows. Use when the user wants to interact with Paigo data.
⭐ 0· 108·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Paigo integration) matches the instructions: discover actions, create a Membrane connection, run actions, and proxy requests to Paigo via Membrane. There are no unrelated requirements or capabilities in the manifest.
Instruction Scope
SKILL.md confines runtime behavior to installing/using the Membrane CLI, logging in, creating a Paigo connection, listing and running actions, and optionally proxying raw API requests through Membrane. It does not instruct reading local files or grabbing unrelated environment variables. Important privacy note: proxying and action calls go through Membrane's servers, so Paigo request/response data and auth will transit Membrane; the doc explicitly relies on Membrane to manage credentials.
Install Mechanism
There is no formal install spec in the manifest (instruction-only), but the SKILL.md recommends running `npm install -g @membranehq/cli`. That is an external package install (global npm), which runs third-party code on the machine. The doc also uses npx in examples, which avoids a global install. This is expected for the described workflow but is worth user consideration.
Credentials
The skill declares no required environment variables or credentials and explicitly tells the agent not to ask users for API keys — Membrane handles auth. The absence of unrelated secrets is proportionate. Users should understand that credentials are managed server-side by Membrane (i.e., stored/used by the Membrane service).
Persistence & Privilege
The skill is instruction-only, requests no always:true privilege, and does not modify other skills or system-wide agent settings. It does not request persistent presence or elevated privileges in the manifest.
Assessment
This skill appears coherent and does what it says: it tells the agent to use the Membrane CLI to talk to Paigo. Before installing/using it, consider: (1) the workflow routes Paigo requests and authentication through Membrane's servers — only use this if you trust Membrane with your Paigo data and credentials; (2) the SKILL.md suggests `npm install -g @membranehq/cli` (global npm installs run third-party code and may require privileges); prefer using `npx` when possible or inspect the package/repository first; (3) verify the Membrane package and the listed homepage/repository (https://getmembrane.com and https://github.com/membranedev/application-skills) to ensure authenticity; (4) avoid pasting secrets into free-form commands — use the documented connection flow; and (5) if you need stricter data residency/privacy guarantees, review Membrane's privacy/security docs or configure direct Paigo API usage instead.Like a lobster shell, security has layers — review code before you run it.
latestvk970a4ptae03055sph401tyshn8431zq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.