Scaledrone
v1.0.0Scaledrone integration. Manage data, records, and automate workflows. Use when the user wants to interact with Scaledrone data.
⭐ 0· 53·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (Scaledrone via Membrane) matches the instructions (use @membranehq/cli, create connections, proxy requests). However the registry metadata lists no required binaries while the runtime instructions assume npm/node are available to install the Membrane CLI — this is an omission in the declared requirements rather than a functional mismatch.
Instruction Scope
Instructions are focused on interacting with Scaledrone through Membrane: installing the CLI, logging in via browser, creating connections, listing actions, running actions, and proxying API requests. They do not instruct the agent to read unrelated files, exfiltrate secrets, or modify unrelated system configuration.
Install Mechanism
There is no formal install spec in the registry (lowest risk), but SKILL.md directs users to run a global npm install (-g @membranehq/cli). Installing a package from the public npm registry is a moderate-risk action — normal for a CLI, but users should verify the package source and be aware it will write files to the system (global node_modules/bins).
Credentials
The skill declares no required environment variables or credentials and relies on Membrane to handle authentication via an interactive browser flow. That aligns with the stated practice of not asking users for API keys. Network access and a Membrane account are legitimately required.
Persistence & Privilege
Skill is not always-enabled, is user-invocable, and allows normal autonomous invocation. It does not request persistent system-wide privileges or modify other skills’ configurations.
Assessment
This skill appears to do what it says: use Membrane's CLI to interact with Scaledrone. Before installing or running it: 1) Confirm you have Node/npm available (SKILL.md assumes npm but the registry didn't list it). 2) Inspect or verify the @membranehq/cli package source (npm package and the referenced GitHub repo) before installing globally. 3) Prefer installing the CLI in a controlled environment (container or VM) if you do not want system-wide npm globals. 4) Expect an interactive browser login (or a copy/paste code for headless runs) — you will be authenticating to Membrane, which will then proxy requests to Scaledrone. 5) If you have strict data controls, review what you send through the Membrane proxy because requests will transit their service.Like a lobster shell, security has layers — review code before you run it.
latestvk977364rwd17q9m3y3sc27qzg9848a79
License
MIT-0
Free to use, modify, and redistribute. No attribution required.