Propelauth
v1.0.2PropelAuth integration. Manage Users, Organizations. Use when the user wants to interact with PropelAuth data.
⭐ 0· 88·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name and description state a PropelAuth integration and the SKILL.md exclusively documents how to use the Membrane CLI to connect to and operate on PropelAuth data. Required actions (connect, action list/run, proxy requests) align with the stated purpose.
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, running login/connection/action commands, and proxying API requests through Membrane. There are no instructions to read arbitrary local files or request unrelated environment variables. The skill does require network access and a Membrane account (documented in the file).
Install Mechanism
This is an instruction-only skill (no auto-install), but the SKILL.md recommends installing the official @membranehq/cli globally via npm and suggests using npx in examples. Installing global npm packages or invoking npx will fetch and run remote code — expected for CLI usage but worth noting as a user decision.
Credentials
The skill declares no required environment variables and explicitly advises not to ask users for API keys. However, it relies on Membrane's hosted service to manage credentials: user authentication and PropelAuth requests are proxied through Membrane, so credentials and request data will be handled by that third party. This is proportionate to the described design but users should be aware of data/credential flow to Membrane.
Persistence & Privilege
The skill does not request permanent presence (always=false), does not modify other skills or system-wide settings in its instructions, and is user-invocable. Default autonomous invocation is allowed (platform default) but not combined with any broad privileges here.
Assessment
This skill is coherent: it instructs you to use the official Membrane CLI to connect to and proxy calls to PropelAuth rather than asking for raw API keys. Before installing or using it, confirm you trust Membrane (https://getmembrane.com) because authentication and request proxying will involve their service and stored tokens. If you are uncomfortable installing global npm packages, consider using the npx examples (which run a remote package) or installing in a controlled environment. Verify the permissions granted during the Membrane connect/login flow and review Membrane's privacy/security docs before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk9793yxk0jq7apesqc7rekjkgs8432dz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.