Poool
v1.0.2Poool integration. Manage data, records, and automate workflows. Use when the user wants to interact with Poool data.
⭐ 0· 84·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name and description align with using Membrane to integrate with Poool. One minor inconsistency: registry metadata lists no required binaries, but the SKILL.md explicitly instructs installing and using the '@membranehq/cli' (membrane) binary — the skill will effectively require that CLI be present.
Instruction Scope
Runtime instructions are focused on discovering connections, running Membrane actions, and proxying requests to the Poool API. They do not instruct reading unrelated files, exporting secrets, or contacting unexpected endpoints beyond Membrane/Poool.
Install Mechanism
No install spec is embedded in the skill (instruction-only). The SKILL.md tells users to install a package from the public npm registry (npm install -g @membranehq/cli) or use npx. Installing CLI tooling from npm is a normal pattern but carries the usual risk of running third-party code; verify the package and publisher (membranehq) before installing.
Credentials
The skill requests no environment variables or local credentials and explicitly recommends letting Membrane manage auth (do not ask users for API keys). The requested access is proportionate to the stated integration task.
Persistence & Privilege
Skill is instruction-only, does not request always:true, and does not attempt to modify other skills or system-wide configuration. It will require user-run CLI commands when invoked but does not claim persistent elevated privileges.
Assessment
This skill is coherent: it uses the Membrane CLI to access Poool and requests no extra secrets. Before installing, verify you trust the Membrane project and the npm package (@membranehq/cli) — review the package page and GitHub repo, and prefer using npx if you want to avoid a global install. Be aware the skill relies on browser-based login flows (you'll open a URL to authenticate) and that installing an npm CLI runs third-party code on your machine. If you have strong security controls, consider installing the CLI in an isolated environment or reviewing the CLI's source first. Also note the small metadata mismatch: the SKILL.md requires the 'membrane' CLI even though the registry metadata lists no required binaries.Like a lobster shell, security has layers — review code before you run it.
latestvk97a6yvg8zjber29we59mf7btx8435xr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.