Platform9
v1.0.2Platform9 integration. Manage data, records, and automate workflows. Use when the user wants to interact with Platform9 data.
⭐ 0· 117·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (Platform9 integration) match the runtime instructions: all operations are performed via the Membrane CLI which proxies requests to Platform9. Requiring network access and a Membrane account is coherent with the stated purpose.
Instruction Scope
SKILL.md only instructs use of the Membrane CLI (login, list/connect actions, run actions, proxy requests). It does not ask the agent to read arbitrary local files, environment variables, or other system configuration. Proxying requests to Platform9 via Membrane is expected functionality for this connector.
Install Mechanism
This is an instruction-only skill (no install spec), but it tells users to run `npm install -g @membranehq/cli`. Installing a global npm package executes third‑party code on the host — a common pattern but a real installation risk the user should consciously accept and verify (package provenance, maintainers, versions).
Credentials
The skill declares no required environment variables or credentials and explicitly advises letting Membrane handle credentials via browser login. That is proportionate to a connector that delegates auth to a central service.
Persistence & Privilege
always is false and there are no instructions to modify other skills or system-wide configs. The skill does not request elevated or persistent platform privileges beyond using the Membrane CLI when invoked.
Scan Findings in Context
[no-findings] expected: The package is instruction-only and contains no code files, so the regex-based scanner had nothing to analyze. That absence of findings is expected but leaves the npm CLI install as the primary runtime risk to evaluate.
Assessment
This skill appears coherent: it uses the Membrane CLI to access Platform9 and does not ask for unrelated credentials. Before installing, verify you trust the @membranehq/cli npm package (check the npm page, GitHub repo, author, and recent release notes). Understand that signing in via Membrane grants Membrane access to your Platform9 account on your behalf — review the connector's permissions and privacy policy. Prefer using npx for one-off commands if you want to avoid a global install, and avoid supplying local secrets or config files to the CLI unless you understand how they're used.Like a lobster shell, security has layers — review code before you run it.
latestvk97734hk34zh3dp4e06z24gj65842nfn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.