Traceable
v1.0.0Traceable integration. Manage data, records, and automate workflows. Use when the user wants to interact with Traceable data.
⭐ 0· 49·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is described as a Traceable integration and the SKILL.md exclusively documents using the Membrane CLI to discover, connect, and call Traceable actions or proxy API requests. Recommending @membranehq/cli is coherent with the stated purpose.
Instruction Scope
Instructions stick to installing and using the Membrane CLI, creating connections, listing/running actions, and proxying requests to Traceable. One notable capability: membrane request allows arbitrary proxied calls to any Traceable API path, which is functionally appropriate but gives broad API access via the Membrane connection (expected for integration but worth being explicit about). The instructions do not ask the agent to read unrelated files or environment variables.
Install Mechanism
There is no automated install spec in the skill bundle; the doc instructs the user to run a public npm global install (or npx) for @membranehq/cli. Installing from npm is a common approach and is proportional, but users should treat any global npm install like installing third-party tooling and verify the package/source before running it.
Credentials
The manifest declares no environment variables or credentials, and the SKILL.md relies on Membrane's browser-based login flow rather than asking for local API keys. This is proportionate; however, using Membrane means that Membrane (a third party) will hold and manage authentication for Traceable on the user's behalf, so trusting that service is required.
Persistence & Privilege
The skill does not request persistent inclusion (always:false) or other elevated platform privileges and has no install-time hooks or config writes in the bundle. Autonomous invocation is allowed (default) but not exceptional here.
Assessment
This skill is internally consistent: it instructs use of the Membrane CLI to connect to Traceable and does not request unrelated credentials or system access. Before installing/using it: (1) verify the @membranehq/cli package and its publisher on npm, (2) understand that Membrane will manage your Traceable credentials and can proxy arbitrary API calls (so you must trust that service), and (3) be mindful if you grant an autonomous agent the ability to call this skill — it could run proxied requests to your Traceable data using the Membrane connection. If you need tighter control, prefer creating scoped connections in Membrane or using a read-only account for integration.Like a lobster shell, security has layers — review code before you run it.
latestvk974nt6yth54f7abte790avbrx84eag5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.