Terra
v1.0.2Terra integration. Manage data, records, and automate workflows. Use when the user wants to interact with Terra data.
⭐ 0· 102·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to integrate with Terra and the SKILL.md consistently uses Membrane to connect to Terra APIs and run actions. Minor inconsistency: the registry metadata lists no required binaries, but the runtime instructions explicitly require installing the @membranehq/cli (a CLI binary). This is plausible but the manifest should declare that dependency.
Instruction Scope
Instructions are narrowly scoped to installing and using the Membrane CLI to discover connections/actions, perform actions, and proxy requests to Terra. They do not ask the agent to read unrelated files, request unrelated credentials, or exfiltrate data to unexpected endpoints. Proxying arbitrary Terra API calls via Membrane is mentioned — which is expected for this purpose but does allow broad Terra access once authorized.
Install Mechanism
There is no formal install spec in the registry, but the SKILL.md tells users to run `npm install -g @membranehq/cli`. Installing a public npm CLI is a standard approach but carries the usual npm risk surface (supply-chain, global install privileges). The skill does not pin a specific trusted release URL; consider using npx or verifying the package source.
Credentials
The skill declares no required environment variables or secrets and directs authentication through Membrane (browser-based OAuth / connector flow). It does not request unrelated credentials. The need for a Membrane account and network access is proportional to the described functionality.
Persistence & Privilege
The skill is not always-enabled and is user-invocable; it uses the platform default of allowing model invocation. It does not request persistent system-wide configuration or elevated privileges beyond installing a CLI (as instructed).
Assessment
This skill appears to be what it says: a Terra integration that operates via the Membrane CLI. Before installing or using it: (1) verify you trust Membrane (@membranehq/cli) because that CLI will handle authentication and proxy Terra API calls and will therefore see request/response data; (2) prefer using npx or a local (non-global) install if you want to avoid global npm installs or running as root; (3) review the permissions/scopes requested when you create the Membrane connector to Terra so it only has the access you expect; (4) note the minor manifest mismatch — the SKILL.md requires the Membrane CLI but the registry metadata doesn't list required binaries — confirm you are comfortable installing that CLI before proceeding. If you are uncomfortable with Membrane having proxy access to your Terra data, do not install/use this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97b2hrwh0q888888q7ch67kpx8423an
License
MIT-0
Free to use, modify, and redistribute. No attribution required.