Skyword
v1.0.0Skyword integration. Manage data, records, and automate workflows. Use when the user wants to interact with Skyword data.
⭐ 0· 51·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The SKILL.md consistently describes using the Membrane CLI to connect to Skyword, discover actions, run actions, and proxy arbitrary Skyword API requests. Required capabilities (network, Membrane CLI) match the stated purpose; no unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Runtime instructions direct the agent/operator to install @membranehq/cli, run `membrane login` (opens a browser), create connections, list/run actions, and proxy requests via `membrane request`. This is in-scope for a Skyword integration, but these steps cause API calls and user data (request paths, bodies, parameters) to be proxied through Membrane’s servers—users should be aware that content and metadata will flow to that external service.
Install Mechanism
There is no formal install spec but the instructions ask the user to run `npm install -g @membranehq/cli` (and suggest npx). That is a reasonable, common install path for a CLI, but global npm installs require elevated permissions and install code from the npm registry; prefer `npx` or review the package source if you have concerns.
Credentials
The skill does not request environment variables, local secrets, or config paths. Authentication is delegated to Membrane (browser-based OAuth flow), so the skill itself does not ask for unrelated credentials — this is proportionate.
Persistence & Privilege
always:false (normal). The skill does not request persistent system-wide changes or special privileges. However, because it instructs installing and invoking an external CLI and creates connections that persist within Membrane, you should understand the long-term access you grant to Membrane when authorizing connections.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to talk to Skyword and does not request unrelated secrets. Before installing, verify you trust Membrane (https://getmembrane.com and the referenced GitHub repo) because API calls and content will be proxied through their service. To reduce local risk prefer `npx @membranehq/cli@latest` over global `npm install -g`, inspect the package repository if you can, and only authorize Skyword access with accounts you are comfortable granting to a third-party integration. If you need higher assurance, ask the skill publisher for the exact package version and the GitHub repo commit used for the CLI.Like a lobster shell, security has layers — review code before you run it.
latestvk97cy2kz34rcgtp8yvmphvgvm58441gs
License
MIT-0
Free to use, modify, and redistribute. No attribution required.