Plance
v1.0.2Plance integration. Manage data, records, and automate workflows. Use when the user wants to interact with Plance data.
⭐ 0· 99·1 current·1 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description claim a Plance integration and the SKILL.md exclusively documents using the Membrane CLI to discover connectors, create connections, run actions, and proxy API calls to Plance. The required artifacts (none) match this purpose.
Instruction Scope
Instructions remain within the stated scope (install Membrane CLI, login via browser, list/connect to Plance connectors, run actions, or proxy requests). One important behavioral detail: the instructions explicitly route API calls and authentication through Membrane's servers (proxy + server-side auth), so user data and credentials are handled by Membrane rather than only locally — this is expected for the integration but is a privacy/third-party-data flow the user should accept.
Install Mechanism
No automatic installer is embedded in the skill (instruction-only). It recommends a global npm install of @membranehq/cli which is a typical distribution method but carries the usual npm package risks (supply-chain/trust in package maintainer). No downloads from arbitrary URLs or archive extraction are present.
Credentials
The skill declares no required environment variables, credentials, or config paths. The SKILL.md also advises not to ask users for API keys and to use Membrane connections instead — this is proportionate to the described functionality.
Persistence & Privilege
The skill is not always-enabled and does not request any elevated platform privileges. It's an instruction-only skill and does not attempt to modify other skills or system-wide settings.
Assessment
This skill is coherent: it tells you to install and use the Membrane CLI to connect to Plance, so expect your Plance API calls and authentication to be proxied and managed by Membrane. Before installing or using it, verify you trust Membrane (review their privacy/security docs and the npm package owner), prefer using a dedicated account or limited-scope workspace for sensitive data, and confirm the exact package version you install. If you cannot or do not want your data routed through a third party, do not use this integration.Like a lobster shell, security has layers — review code before you run it.
latestvk977e7pdez9v8khtq0mcdn2mj9843gdj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.