Serveravatar
v1.0.2ServerAvatar integration. Manage Servers, Teams. Use when the user wants to interact with ServerAvatar data.
⭐ 0· 112·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description match the instructions: the skill delegates ServerAvatar interactions to the Membrane CLI. Minor inconsistency: SKILL.md instructs installing an npm package but the skill metadata does not declare required binaries (Node/npm) which are effectively necessary to follow the instructions.
Instruction Scope
Instructions are scoped to installing and using the Membrane CLI, creating connections, listing/running actions, and proxying requests to ServerAvatar. They do not instruct reading unrelated local files or exfiltrating data.
Install Mechanism
No install spec in registry (instruction-only). The instructions recommend `npm install -g @membranehq/cli` (global npm install). This is a standard but higher-impact install method than an instruction-only skill because it writes to the host; verify the npm package and prefer installing in a controlled environment if concerned.
Credentials
The skill declares no required env vars or credentials and explicitly advises using Membrane-managed connections rather than asking for API keys. That aligns with the described behavior.
Persistence & Privilege
Skill is instruction-only, always:false, and does not request persistent system privileges or modify other skills; autonomous invocation is allowed (platform default) but not elevated by the skill.
Assessment
This skill appears to do what it claims: it tells the agent how to use the Membrane CLI to interact with ServerAvatar. Before installing or using it: (1) confirm you have Node/npm on the host (the SKILL.md expects you to run `npm install -g` but required binaries are not declared), (2) review the @membranehq/cli package (source, maintainers, recent versions) before doing a global install, or install it in an isolated environment/container, (3) ensure you trust the Membrane service (https://getmembrane.com) since it will manage auth and proxy requests to ServerAvatar, (4) do not share secrets locally—follow the skill's guidance to create a connection rather than pasting API keys, and (5) if you need higher assurance, request the skill author to declare required binaries (node/npm) in the metadata and to provide an explicit install spec or link to the CLI release page.Like a lobster shell, security has layers — review code before you run it.
latestvk977gegfthrrz172b06s652d4x843x44
License
MIT-0
Free to use, modify, and redistribute. No attribution required.