Rafay Systems
v1.0.0Rafay Systems integration. Manage data, records, and automate workflows. Use when the user wants to interact with Rafay Systems data.
⭐ 0· 31·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The SKILL.md consistently describes using the Membrane CLI to connect to Rafay Systems, discover actions, run actions, and proxy API calls. Required capabilities (network access, a Membrane account, installing the Membrane CLI) match the stated purpose; there are no unrelated environment variables, binaries, or config paths requested.
Instruction Scope
Runtime instructions only tell an operator to install and use the Membrane CLI, log in via browser or headless flow, create/connect a Rafay connector, list actions, run actions, and proxy requests. The document does not instruct reading arbitrary local files, environment variables, or exfiltrating data beyond the expected API interactions.
Install Mechanism
There is no formal install spec, but the SKILL.md instructs running `npm install -g @membranehq/cli`. Installing a package globally from npm is a common but non-trivial operation (it runs code on your machine and writes to system paths). This is expected for a CLI-based integration but carries the usual moderate risk associated with installing third-party npm packages.
Credentials
The skill requests no environment variables or local credentials. It explicitly advises letting Membrane handle authentication server-side and not asking users for API keys, which is proportionate to the task. Note: using Membrane means your Rafay credentials/auth flows are handled by Membrane's service, so trust in that service is required.
Persistence & Privilege
The skill is instruction-only, has no install hooks in the registry metadata, and does not request always:true or other elevated persistence. It does not modify other skills' configs or system-wide settings according to the provided artifacts.
Assessment
This skill appears coherent and does what it says: it uses the Membrane CLI to talk to Rafay Systems. Before installing or running it:
- Verify and trust the Membrane service (getmembrane.com) since API calls and credentials are proxied through their platform.
- Prefer using `npx @membranehq/cli@latest` (as the SKILL.md sometimes demonstrates) to avoid a global install, or inspect the `@membranehq/cli` package on the npm registry and its publisher before running `npm install -g`.
- Run initial commands in a test environment or sandbox to confirm behavior and avoid accidental production changes.
- Be aware that this skill will cause network calls (via Membrane) to the Rafay APIs; do not paste secrets into chat — follow the described connector login flow instead.
- Confirm the skill publisher/source if you require provenance; the registry listing shows an owner id and a GitHub repository link, but the skill's "Source" field was marked unknown in the provided metadata.Like a lobster shell, security has layers — review code before you run it.
latestvk973cb0k9a5b1dmxv4q9fgpj2d84839e
License
MIT-0
Free to use, modify, and redistribute. No attribution required.