Sheetdb
v1.0.2SheetDB integration. Manage data, records, and automate workflows. Use when the user wants to interact with SheetDB data.
⭐ 0· 68·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (SheetDB integration) aligns with the instructions: the SKILL.md describes using the Membrane CLI to connect to SheetDB, list/run actions, and proxy API requests. No unrelated credentials, binaries, or paths are requested.
Instruction Scope
Runtime instructions are focused on installing and using the Membrane CLI to manage SheetDB connections and proxy raw API calls. The instructions do not ask the agent to read local files or unrelated environment variables, but they do route user requests/data through Membrane services (credential and request proxying).
Install Mechanism
No install spec in registry; SKILL.md instructs users to run `npm install -g @membranehq/cli` (and shows npx usage). Installing a global npm package is a typical, moderate-risk action — verify the package identity/source before installing and consider using npx to avoid global installs.
Credentials
The skill declares no required env vars or secrets, which matches the instructions that rely on Membrane-managed auth. However, using Membrane means spreadsheet data and auth will be handled by a third party (Membrane), so the effective credential and data flow is external to the user's machine and should be accepted consciously.
Persistence & Privilege
The skill does not request always:true, does not declare persistent config paths, and is user-invocable. It does not modify other skills or ask to store credentials locally in its instructions.
Assessment
This skill appears to do what it says: it teaches the agent to use the Membrane CLI to connect to SheetDB and proxy API requests. Before installing or using it: 1) Verify @membranehq/cli is the official package/repository you trust (inspect the npm package and GitHub repo). 2) Be aware that requests and credentials will be handled by Membrane servers — do not use this flow for highly sensitive spreadsheet data unless you trust Membrane's privacy and security. 3) If you prefer not to install a global package, use the npx examples shown in the SKILL.md. 4) Because this is instruction-only, there is no hidden code in the skill bundle, but network and third‑party trust are the main risks; review Membrane's docs and privacy policy if concerned.Like a lobster shell, security has layers — review code before you run it.
latestvk97934702md7yb68vkme0frscn842zb7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.