Pdfless
v1.0.0Pdfless integration. Manage data, records, and automate workflows. Use when the user wants to interact with Pdfless data.
⭐ 0· 58·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description claim Pdfless integration and the instructions consistently steer the agent to use the Membrane CLI and Membrane proxy to access Pdfless. Required capabilities (network access, Membrane account) align with the stated purpose.
Instruction Scope
SKILL.md only instructs installing/using the Membrane CLI, logging in, creating connections, listing actions, running actions, and proxying requests to Pdfless. It does not ask the agent to read unrelated files, harvest environment variables, or transmit data to unexpected endpoints.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but SKILL.md asks users to run `npm install -g @membranehq/cli`. Installing a global npm package is a common but moderately privileged action—verify the package publisher and checksum before installing. This is expected for a CLI-based integration.
Credentials
The skill declares no required environment variables or credentials and explicitly directs the agent to use Membrane-managed connections rather than asking for API keys. Requested scope of secrets is minimal and appropriate.
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-level changes. Nothing in SKILL.md indicates modification of other skills or system-wide configs.
Assessment
This skill appears coherent: it simply instructs using the Membrane CLI to access Pdfless. Before installing/using it, consider the following: 1) Confirm you trust the Membrane project (@membranehq on npm and getmembrane.com) and review the npm package metadata and recent release history before running a global npm install. 2) The CLI login opens a browser flow—ensure you complete auth only on trusted devices. 3) If you let an agent run shell commands, it will be able to execute the Membrane CLI (and thus interact with your Pdfless data via the connection); grant execution rights accordingly. 4) If you prefer not to install global packages, run the CLI via npx to avoid global installs. If you want more assurance, ask the skill author for a signed release URL or more details about the exact Membrane connector used.Like a lobster shell, security has layers — review code before you run it.
latestvk97cjw28rasprx7xxdnrw2qeas84b0pb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.