Timekit
v1.0.2Timekit integration. Manage data, records, and automate workflows. Use when the user wants to interact with Timekit data.
⭐ 0· 98·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with Timekit and all runtime instructions center on using Membrane (a connector/proxy) to access Timekit; requiring the Membrane CLI and a Membrane account is coherent with the stated purpose.
Instruction Scope
SKILL.md instructs installing and using the Membrane CLI, authenticating via browser or headless flow, listing/connecting actions, and using Membrane's proxy to call Timekit endpoints. It does not instruct reading unrelated local files or requesting unrelated credentials; the scope is limited to enabling Timekit operations via Membrane.
Install Mechanism
There is no registry install spec, but the instructions tell the user to run `npm install -g @membranehq/cli`. Installing a public npm CLI globally is a normal but non-trivial action — it pulls code from the public npm registry and requires trust in the package and its maintainers.
Credentials
The skill declares no environment variables or credentials and explicitly tells the user not to supply API keys; authentication is delegated to Membrane via OAuth/browser flow. This is proportionate to a connector that proxies API calls and manages tokens server-side.
Persistence & Privilege
The skill is instruction-only, not always-enabled, does not request system-wide configuration changes, and does not modify other skills. Normal agent autonomy settings apply.
Assessment
This skill is coherent but depends on third-party components you must trust: the Membrane service and the @membranehq/cli npm package. Before using it, verify the npm package and its publisher (e.g., npm page, maintainers, recent releases), review Membrane's privacy/security docs (what data they store or see), and be aware that authenticated connections grant Membrane access to your Timekit data (the proxy will forward requests and responses). If you prefer not to install a global npm CLI on your machine, run it in a controlled environment (container or VM).Like a lobster shell, security has layers — review code before you run it.
latestvk973cg1j06rfk81m2d164yq4rs842yp9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.