ClawHub

Tubular

v1.0.2

Tubular integration. Manage data, records, and automate workflows. Use when the user wants to interact with Tubular data.

⭐ 0· 55·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill declares a Tubular integration and all runtime instructions center on using the Membrane CLI to access Tubular (discover connectors, create connections, run actions, proxy requests). It does not ask for unrelated credentials or binaries.
✓
Instruction Scope
SKILL.md only instructs installing and using the Membrane CLI, performing login via browser, creating a connector/connection, listing actions, running actions, and proxying requests to Tubular. It does not instruct the agent to read arbitrary system files, environment variables, or to exfiltrate data to unexpected endpoints.
ℹ
Install Mechanism
This is an instruction-only skill (no install spec), but SKILL.md tells the user to run `npm install -g @membranehq/cli`. A global npm install is a normal approach but does install third-party code on the host; the registry metadata does not automate or vet that install.
✓
Credentials
No environment variables or credentials are declared or required by the skill; it relies on Membrane's browser-based login flow and server-side credential management, which is proportional to the stated purpose.
✓
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings, and does not require persistent system-level privileges beyond installing an optional CLI binary.
Assessment
This skill is coherent: it relies on the Membrane CLI to talk to Tubular and does not ask for direct API keys. Before installing, verify you trust @membranehq/cli (review the package repo and permissions), be aware that `npm install -g` writes a global binary, and expect to complete browser-based login to allow Membrane to manage credentials server-side. If you are concerned about allowing autonomous agent actions that can call the CLI, restrict or review agent invocation policies on your platform before enabling the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bedahk7kdap0j4tvk8q57xd842wsm

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments