Sheetsu
v1.0.2Sheetsu integration. Manage data, records, and automate workflows. Use when the user wants to interact with Sheetsu data.
⭐ 0· 75·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Sheetsu integration) matches what the SKILL.md instructs: using Membrane to discover/connect to Sheetsu actions and run proxied requests. No unrelated services, binaries, or env vars are requested.
Instruction Scope
Instructions are limited to installing the Membrane CLI, logging in, creating/using a connection, listing and running actions, and proxying requests to Sheetsu. They do not instruct the agent to read arbitrary files, exfiltrate local data, or access unrelated credentials.
Install Mechanism
The skill is instruction-only (no install spec in the manifest) but tells the user to run `npm install -g @membranehq/cli`. This is a standard public npm package install (moderate trust surface). It's expected for a CLI-based integration but does mean code will be fetched at install time from the npm registry — review @membranehq/cli before installing.
Credentials
No environment variables, config paths, or credentials are requested by the skill. The SKILL.md explicitly defers auth to Membrane (server-side), which is proportionate to the integration's needs. Note that a Membrane account and browser-based login are required.
Persistence & Privilege
The skill is not forced-always, is user-invocable, and does not request persistent system modifications or access to other skills' configs. It does instruct installing a global npm binary, which affects the system environment but is typical for CLI usage.
Assessment
This skill is coherent with its stated purpose: it uses the Membrane CLI to connect to Sheetsu and proxy API calls. Before installing, consider the following: you must install a global npm CLI (@membranehq/cli) which fetches code from the npm registry — review that package and its permissions; the CLI will open a browser for login (or require manual completion in headless environments); connections created through Membrane grant access to your Sheetsu data, so treat connection IDs as sensitive; ensure you trust Membrane/@membranehq and the listed homepage/repo before granting access. If you prefer not to install a global CLI, or to avoid sending data through a third party, do not install this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97dxhzjy9kd8ts54g4ge9ybtx843jae
License
MIT-0
Free to use, modify, and redistribute. No attribution required.