Simplebackups
v1.0.2SimpleBackups integration. Manage Backups, Restores, Alerts, Users. Use when the user wants to interact with SimpleBackups data.
⭐ 0· 125·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (SimpleBackups integration) matches the instructions: the SKILL.md consistently instructs using the Membrane CLI to connect to SimpleBackups, list actions, run actions, and proxy requests. Nothing in the skill requests unrelated credentials, binaries, or configuration.
Instruction Scope
The runtime instructions are narrowly scoped to installing and using the Membrane CLI, authenticating via browser, creating connections, listing actions, running actions, and using Membrane's proxy. The instructions do not ask the agent to read arbitrary files, system state, or unrelated environment variables.
Install Mechanism
There is no packaged install spec, but the SKILL.md tells users to run 'npm install -g @membranehq/cli' (public npm). Using npm to install a global CLI is a common pattern, but installing arbitrary npm packages runs third-party code on the host and is a moderate-risk operation. The instructions also suggest 'npx ...' in places, which is a safer transient option.
Credentials
The skill declares no required env vars or secrets, which is proportional. However, it depends on the Membrane service to manage authentication server-side: Membrane will hold or proxy the SimpleBackups credentials and can make API calls on the user's behalf. This centralizes credential custody and requires trusting the Membrane service and its OAuth/connector scopes.
Persistence & Privilege
The skill is not always-on, requests no special agent-level privileges, and is instruction-only (no files written). It does not modify other skills or system-wide settings. Autonomous invocation is allowed by default but is not combined with other concerning privileges.
Assessment
This skill is coherent: it tells the agent to use the Membrane CLI to access SimpleBackups. Before installing or using it, consider: 1) Trust: Membrane will broker and/or store credentials for SimpleBackups — only proceed if you trust getmembrane.com/@membranehq and the organization. 2) Package install risk: prefer running actions with npx (transient) instead of globally installing with 'npm install -g' if you want to avoid adding third-party binaries to your system. 3) Review OAuth consent/scopes when you create the connection so you know what access the connector will get. 4) If you need strict data custody, consider integrating with SimpleBackups directly (using your own API keys) instead of a third-party proxy. Overall the skill appears consistent with its stated purpose, but its security depends on trusting the Membrane service and the npm package.Like a lobster shell, security has layers — review code before you run it.
latestvk977re8t640yc5vzmm4gfsb9hn8431m3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.