Tutor Lms
v1.0.0Tutor LMS integration. Manage data, records, and automate workflows. Use when the user wants to interact with Tutor LMS data.
⭐ 0· 29·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Tutor LMS integration) match the runtime instructions: the skill relies on the Membrane CLI to connect, list actions, run actions, and proxy API requests to a Tutor LMS site. One minor mismatch: the metadata lists no required binaries, but the instructions explicitly require installing the @membranehq/cli npm package (implying node/npm should be available).
Instruction Scope
SKILL.md limits agent actions to installing and using the Membrane CLI, logging in, creating connections, listing/running actions, and proxying requests to Tutor LMS via Membrane. It does not instruct reading unrelated files, searching local config, or exfiltrating data. Headless login flow is documented and uses browser-auth.
Install Mechanism
There is no formal install spec in the registry (instruction-only). The skill instructs the user to run `npm install -g @membranehq/cli` (normal, moderate-risk install from npm). This is not an arbitrary URL or archive download, but the registry metadata should ideally declare node/npm as required binaries.
Credentials
No environment variables, secrets, or platform config paths are requested. The skill relies on a Membrane account (server-side credential management) which is proportionate to the described functionality and reduces secret handling on the client.
Persistence & Privilege
The skill is not always-enabled, is user-invocable, and does not request elevated persistence or modify other skills or system-wide settings. Autonomous invocation remains enabled (platform default) but is not combined with other red flags.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to connect to Tutor LMS and run actions, and it does not ask for API keys or other secrets. Before installing, confirm the agent environment has node/npm (SKILL.md assumes you can install @membranehq/cli) and be prepared to authenticate via browser/OAuth when creating a connection. Review the OAuth scopes shown by Membrane when you connect to your Tutor LMS site and verify you trust the Membrane service (https://getmembrane.com). As with any global npm install, consider installing in a controlled environment or using a sandbox if you prefer. If you need stronger assurance, request an explicit install spec or that the registry metadata list node/npm as required binaries.Like a lobster shell, security has layers — review code before you run it.
latestvk971qv0w2yb46b7fvqmtcd2xf984681n
License
MIT-0
Free to use, modify, and redistribute. No attribution required.