Paved
v1.0.2Paved integration. Manage data, records, and automate workflows. Use when the user wants to interact with Paved data.
⭐ 0· 98·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description say 'Paved integration' and the SKILL.md exclusively documents using the Membrane CLI to connect to Paved and run proxyed API actions. Nothing requested (no env vars, config paths, or unrelated binaries) conflicts with that purpose.
Instruction Scope
Instructions are narrowly scoped to installing/using @membranehq/cli, performing login flows (browser-based or headless), listing/connecting connectors, running actions, and proxying requests to Paved. The instructions do not ask the agent to read unrelated files, harvest system secrets, or send data to unexpected endpoints.
Install Mechanism
There is no packaged install spec in the registry; the SKILL.md tells users to run `npm install -g @membranehq/cli` (and also shows `npx` usage). Installing a global npm CLI is a reasonable, common step for a CLI-based integration but it does mean arbitrary third-party code will be installed on the system. Prefer `npx` or review the package/repo before a global install.
Credentials
The skill declares no required env vars and the documentation explicitly instructs not to ask users for API keys (Membrane handles auth). That is proportionate for a connector-based CLI integration.
Persistence & Privilege
Skill is instruction-only, always:false, and does not request persistent agent privileges or attempt to modify other skills or system-wide settings.
Assessment
This skill is internally coherent: it documents using the Membrane CLI to manage Paved data and doesn't ask for unrelated secrets. Before installing, verify you trust the @membranehq package and the getmembrane.com/Membrane GitHub repo (review the npm package and its releases). To reduce risk, use `npx` where shown instead of `npm install -g`, or run the CLI in a container/VM. Be aware the CLI performs browser-based auth flows and will proxy requests to Paved — only use it with accounts you trust and avoid pasting unrelated sensitive tokens into commands.Like a lobster shell, security has layers — review code before you run it.
latestvk972t0ww34x2yxev1dvbqsggjx843r16
License
MIT-0
Free to use, modify, and redistribute. No attribution required.