Penta
v1.0.0Penta integration. Manage data, records, and automate workflows. Use when the user wants to interact with Penta data.
⭐ 0· 62·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Penta integration) align with the instructions: the skill explicitly uses the Membrane CLI to discover connectors, create connections, run actions, and proxy API requests to Penta. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md confines runtime actions to installing/using the @membranehq/cli, running membrane commands, and opening browser-based auth flows. It does not ask to read local files, environment variables, or unrelated system state, nor to exfiltrate data to unexpected endpoints.
Install Mechanism
There is no formal install spec in the skill bundle, but the README instructs users to run 'npm install -g @membranehq/cli'. Installing a global npm package is normal for a CLI but carries the usual trust considerations (verify package origin and version). The SKILL.md points to a homepage and repo, which helps verification.
Credentials
The skill declares no required environment variables or credentials and explicitly instructs to rely on Membrane's server-side credential management. That matches the described workflow (browser-authenticated connections managed by Membrane).
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings, and requires no persistent local credentials. It relies on network access and a Membrane account, which is appropriate for the described functionality.
Assessment
This skill appears coherent and uses the Membrane CLI as intended for integrating with Penta. Before installing, verify the @membranehq/cli package and repository links (homepage and GitHub) to ensure you get the official package and the expected version. Installing a global npm CLI has the usual risks—consider installing in a controlled environment or using npx where appropriate. Note that the skill will open browser-based authentication and that Membrane will manage credentials server-side; avoid pasting unrelated secrets into commands. Also be mindful that the 'membrane request' proxy can issue arbitrary API calls to Penta—do not let the agent run destructive requests (DELETE/POST) without your explicit confirmation.Like a lobster shell, security has layers — review code before you run it.
latestvk973twyw1ca4spx8n387ryj8en8447vb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.