Relavate
v1.0.2Relavate integration. Manage Organizations, Users. Use when the user wants to interact with Relavate data.
⭐ 0· 106·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Relavate integration) match the instructions, which use the Membrane CLI to connect to Relavate. No unrelated binaries, env vars, or config paths are requested.
Instruction Scope
SKILL.md limits runtime actions to installing and using the Membrane CLI, creating connections, listing actions, running actions, and proxying API calls. It does not instruct reading arbitrary files or unrelated environment variables, nor does it direct data to unexpected endpoints beyond Membrane/Relavate.
Install Mechanism
The skill is instruction-only (no install spec). It recommends installing @membranehq/cli via npm -g, which is a reasonable, expected distribution method for a CLI. As a user consideration: global npm installs have system effects and you may prefer npx or a vetted package manager; the skill itself does not embed or download arbitrary code.
Credentials
The skill declares no required environment variables or credentials. It explicitly advises creating a Membrane connection instead of asking for API keys, which is proportionate to the stated purpose. It does require the user to have a Membrane account (documented).
Persistence & Privilege
The skill does not request always-on presence, system-wide config changes, or elevated privileges. It's user-invocable and instruction-only, so it does not persist code or credentials on the agent by itself.
Assessment
This skill is coherent and uses the Membrane CLI as a legitimate proxy to talk to Relavate. Before installing or using it, verify you trust Membrane/@membranehq: the CLI and the proxy will handle authentication and will forward requests (and potentially data) through Membrane's infrastructure. Prefer npx or a scoped install if you want to avoid a global npm install. Confirm the package name (@membranehq/cli) and the Membrane homepage/repository are genuine, and only create a connection when the user explicitly consents (they will authenticate in their browser). If you need tighter control, review Membrane's privacy/security docs and the CLI repository before granting access to Relavate data.Like a lobster shell, security has layers — review code before you run it.
latestvk97dzbm6qqt95sze52wr2h90s9842dcr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.