Truora
v1.0.0Truora integration. Manage data, records, and automate workflows. Use when the user wants to interact with Truora data.
⭐ 0· 58·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Truora integration) matches the instructions: all actions are performed via the Membrane CLI which proxies requests to Truora. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md confines runtime behavior to installing/using the Membrane CLI, creating connections, listing actions, running actions, and proxying requests to Truora. It does not instruct reading arbitrary files, environment variables, or posting data to unexpected endpoints. It does require opening a browser for Membrane login which is appropriate for the described flow.
Install Mechanism
Installation is via npm (npm install -g @membranehq/cli / npx). This is a common, expected mechanism but it downloads and installs code from the public npm registry and may require elevated permissions for global installs. Verify the package identity (namespace, homepage/repo) before installing.
Credentials
The skill declares no required environment variables or secrets and explicitly advises not to ask users for Truora API keys. Using Membrane means credentials are managed server-side; this is proportionate to the stated purpose. Be aware that sensitive PII sent to Truora will transit Membrane's service.
Persistence & Privilege
The skill is not always-enabled and uses normal autonomous invocation defaults. It does not request persistent system-wide changes or access to other skills' configurations.
Assessment
This skill appears coherent: it simply tells the agent to use the Membrane CLI to talk to Truora and does not request unrelated secrets. Before installing, verify that @membranehq/cli and getmembrane.com are the legitimate Membrane project (check the GitHub repo and npm package publisher). Note that installing the CLI with npm -g writes code to your system and may require elevated privileges; using npx runs remote code on demand. Also be aware that using this skill routes Truora requests (and any PII you send) through Membrane's servers — review Membrane's privacy/security and your legal obligations for sharing personal data before connecting production data. If you cannot trust the Membrane service or need local-only processing, do not install or use this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk975xs9hd900p1pe7afa5zaseh84dfyn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.