Sap Ariba
v1.0.2SAP Ariba integration. Manage data, records, and automate workflows. Use when the user wants to interact with SAP Ariba data.
⭐ 0· 99·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description match the SKILL.md: the skill directs the agent to use the Membrane CLI to talk to SAP Ariba, discover actions, run them, or proxy arbitrary Ariba endpoints. Requiring a Membrane account and network access is coherent with that purpose.
Instruction Scope
All runtime instructions are limited to using the Membrane CLI (auth via browser, listing/connecting connectors, running actions, and proxying requests). The SKILL.md does not instruct reading unrelated local files or env vars, but it does instruct installing and running an external CLI and allows proxying arbitrary API endpoints under the authenticated connection — which grants broad access to whatever the connected Ariba account permits.
Install Mechanism
The registry has no install spec, but SKILL.md tells users to run 'npm install -g @membranehq/cli' (a public npm package). That requires installing a global binary (writes to disk, may need elevated privileges). This is a typical but non-trivial side effect; verify the package identity on npm/GitHub before installing.
Credentials
The skill does not request environment variables or local credentials; it explicitly delegates auth to Membrane (server-side) and instructs users not to share API keys. The only access risk is the Membrane connection itself, which will have whatever Ariba permissions you grant during authentication.
Persistence & Privilege
The skill is instruction-only (no code files) and not marked 'always'. It doesn't modify other skills or agent settings. Note: the platform default allows autonomous invocation; if you permit the agent to act autonomously, it could run Membrane CLI commands and operate on Ariba data under the connected account.
Assessment
Before installing or using this skill: 1) Verify the Membrane CLI package and author on npm and the GitHub repository referenced in SKILL.md match (ensure @membranehq is legitimate). 2) Be aware installing 'npm install -g' modifies your system and may require elevated privileges—install only if you trust the package. 3) When creating the Membrane connection, review and limit the Ariba permissions granted (least privilege). 4) If you allow autonomous agent actions, be cautious: the agent could execute Membrane requests that access or modify Ariba data. 5) If you need stronger assurance, request the skill's source or a signed publisher identity, or test in a sandbox account first.Like a lobster shell, security has layers — review code before you run it.
latestvk97e1wp8hhtf84gywskctn1rss843am1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.