Raisely
v1.0.2Raisely integration. Manage Organizations. Use when the user wants to interact with Raisely data.
⭐ 0· 92·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Raisely integration) line up with the instructions (use Membrane to connect to Raisely). Small inconsistency: the registry metadata lists no required binaries/env, but SKILL.md clearly expects network access, a Membrane account, and the Membrane CLI (npm @membranehq/cli). This is plausible but the declared metadata is incomplete.
Instruction Scope
SKILL.md instructs using membrane CLI commands (login, connect, action list/run, request proxy). All actions are focused on interacting with Raisely via Membrane. It does not ask to read arbitrary local files or exfiltrate unrelated data, and it explicitly instructs not to ask users for Raisely API keys.
Install Mechanism
There is no install spec in the registry (instruction-only). The runtime instructions tell the user to run `npm install -g @membranehq/cli` — a typical, moderate-risk step because it installs code from npm. This is a user action (not automatic) and aligns with the described usage, but users should verify the npm package identity and trustworthiness before installing globally.
Credentials
The skill declares no required env vars or secrets, and the instructions explicitly use Membrane's hosted auth flow (no local API keys). This is proportionate: Membrane will hold the Raisely credentials server-side as intended.
Persistence & Privilege
Skill is instruction-only, always: false, user-invocable: true, and does not request persistent platform privileges or modify other skills. It does not request elevated or persistent presence.
Scan Findings in Context
[no_code_to_scan] expected: The static regex scanner had nothing to analyze because this is an instruction-only skill (only SKILL.md). This is expected; the security surface is the runtime instructions rather than packaged code.
Assessment
This skill appears to be what it says: instructions to use the Membrane CLI to interact with Raisely. Before installing/using it: 1) verify you trust @membranehq/cli on npm (check publisher, package page, and recent releases) before doing a global npm install; 2) be aware that Membrane (a third-party service) will hold and proxy Raisely credentials — confirm you are comfortable granting it access to your Raisely account; 3) the registry metadata omitted the CLI/account requirements, so expect to provide a Membrane account and install the CLI locally for the skill to work; and 4) if your agent/platform disallows running arbitrary CLIs or opening browser auth flows, do not run these commands without understanding the platform implications.Like a lobster shell, security has layers — review code before you run it.
latestvk97bnydtyhv7pe3bm0yh3ncex5843a4v
License
MIT-0
Free to use, modify, and redistribute. No attribution required.