Tooljet
v1.0.2ToolJet integration. Manage data, records, and automate workflows. Use when the user wants to interact with ToolJet data.
⭐ 0· 131·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The SKILL.md describes using Membrane CLI to connect to ToolJet, discover actions, run queries, and proxy API requests — this matches the stated ToolJet integration purpose. Nothing requested in the text (connections, actions, proxying) is unrelated to managing ToolJet data.
Instruction Scope
Instructions are limited to installing/using the Membrane CLI, logging in, managing connections, listing actions, running actions, and proxying requests. However the instructions give broad discretion to send arbitrary proxied requests to ToolJet endpoints via Membrane (which is expected for an integration but is effectively a mechanism to send arbitrary API requests and payloads). The SKILL.md does not instruct reading local files or unrelated env vars.
Install Mechanism
There is no install spec in the registry (instruction-only), but the runtime instructions tell the user to run 'npm install -g @membranehq/cli' or use 'npx'. Installing a global npm CLI is a reasonable and common approach for CLIs, but it does require npm/node on the host and pulls code from the npm registry — verify the @membranehq/cli package source (npm/github) before installing.
Credentials
The skill declares no required env vars or credentials and explicitly advises not to ask users for API keys, relying on Membrane to manage credentials. That is proportionate. Minor inconsistency: the registry metadata lists no required binaries, but the SKILL.md assumes availability of npm/node (or npx) to install/run the CLI; the skill should declare that dependency.
Persistence & Privilege
The skill is instruction-only, does not request always:true, and does not declare or modify system config paths. It does not request permanent presence or elevated privileges in the agent environment.
Assessment
This skill appears to be a straightforward integration that uses the Membrane CLI to talk to ToolJet. Before installing or running it: 1) Confirm you have Node/npm (or plan to use npx) since the SKILL.md expects npm but the registry metadata doesn't declare it. 2) Inspect the @membranehq/cli package on npm/GitHub to ensure it is the legitimate CLI you expect. 3) Be aware that the 'membrane request' proxy can send arbitrary requests and bodies to the ToolJet API — treat it like any tool that can transmit data and avoid sending sensitive data unless you trust Membrane's handling and storage policies. 4) Prefer running installs in a controlled environment (container or sandbox) if you are unsure. If you want a deeper review, provide the exact npm package metadata or the Membrane CLI source so I can highlight any risky commands or telemetry.Like a lobster shell, security has layers — review code before you run it.
latestvk97cqgezc7t6a8q02f0gyraffx843cpk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.