Quentn
v1.0.2Quentn integration. Manage Persons, Organizations, Deals, Activities, Notes, Files and more. Use when the user wants to interact with Quentn data.
⭐ 0· 123·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Quentn integration) aligns with the runtime instructions: it uses Membrane to discover and run Quentn actions and proxy API requests. The pieces requested by the SKILL.md (network access, a Membrane account, the Membrane CLI) are coherent with the stated purpose.
Instruction Scope
Instructions are focused on installing and using the Membrane CLI, creating a connection to Quentn, discovering actions, running actions, and proxying requests. They do not instruct reading arbitrary files or exfiltrating environment variables. Note: the SKILL.md tells the user to install a global npm CLI and to perform browser-based login—these are expected for this integration but are actions that affect the host environment and rely on a third-party package.
Install Mechanism
The registry contains no formal install spec; the SKILL.md instructs the user to run 'npm install -g @membranehq/cli'. Installing a global npm package executes code from the npm registry (moderate risk). This is proportionate to the CLI usage but the user should verify package authenticity and the intended version before installing.
Credentials
The skill declares no required env vars or credentials and explicitly advises against asking users for API keys, delegating auth to Membrane. That is proportionate for a proxy/connector that manages auth server-side.
Persistence & Privilege
always is false and there are no code files or install hooks that would persist in the agent. The skill does not request elevated or system-wide privileges and does not attempt to modify other skills or system configuration.
Assessment
This skill is instruction-only and appears coherent: it expects you to install and use the Membrane CLI to manage Quentn connections and lets Membrane handle credentials. Before installing, verify the '@membranehq/cli' npm package and version on the npm registry or GitHub (ensure the publisher is legitimate). Understand that installing a global npm CLI runs third-party code on your machine and that authenticating will delegate credentials/refresh to Membrane's service (review their privacy/security policy). If you prefer not to install an npm global, you can run the CLI with npx or verify an alternative install workflow. Finally, because the skill has no declared binaries or env vars, the agent cannot run these commands autonomously unless you install/configure the CLI and Membrane account yourself.Like a lobster shell, security has layers — review code before you run it.
latestvk9757hye6d9yefcqe91t2vqtmh84211y
License
MIT-0
Free to use, modify, and redistribute. No attribution required.