Sigma
v1.0.0Sigma integration. Manage data, records, and automate workflows. Use when the user wants to interact with Sigma data.
⭐ 0· 63·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description (Sigma integration) align with the runtime instructions: the SKILL.md consistently instructs using the Membrane CLI to connect to Sigma, list actions, run actions, and proxy requests. No unrelated credentials or system access are requested.
Instruction Scope
All runtime steps remain within the stated scope: installing and using the Membrane CLI, performing browser-based login, creating connections, listing actions, and proxying API requests. The SKILL.md does not instruct reading unrelated files or exfiltrating data to unexpected endpoints.
Install Mechanism
This is an instruction-only skill (no install spec), but it tells the user to install the Membrane CLI via `npm install -g @membranehq/cli`. Installing a global npm package is a reasonable and traceable method for this purpose but has moderate risk compared to an instruction-only skill that needs nothing installed—verify the package source and trustworthiness before installing globally.
Credentials
The skill declares no required environment variables or credentials. The SKILL.md explicitly instructs to rely on Membrane for auth (browser-based login and server-side credential handling), which is proportionate to the described functionality.
Persistence & Privilege
No special persistence or elevated privileges are requested. always is false and the skill does not request modifying other skills or system-wide settings. The only persistent effect would be installing a CLI if the user follows the instructions.
Assessment
This skill is coherent with its purpose, but before installing: 1) verify that @membranehq/cli is the official package (check npm package page, homepage, and the GitHub repo linked in the SKILL.md); 2) prefer installing CLIs in user scope rather than globally if you want to limit system impact, or inspect the package before global install; 3) understand that the CLI will open a browser for login and that Membrane will broker access to Sigma (so you are trusting Membrane with your Sigma auth); and 4) because the skill is instruction-only, the SKILL.md is the entire runtime surface—if you need higher assurance, ask for a link to the exact Membrane CLI repository or release artifacts to review before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk9794r3mvtg97xsr49fw2vqwzx849kfn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.