Wavemaker
v1.0.0WaveMaker integration. Manage data, records, and automate workflows. Use when the user wants to interact with WaveMaker data.
⭐ 0· 47·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with WaveMaker and instructs the agent to use the Membrane CLI to discover, connect, and proxy requests to WaveMaker. Asking the user to install Membrane and create a connection is consistent with the described functionality.
Instruction Scope
SKILL.md contains only CLI usage and guidance for authenticating via Membrane and running actions/proxied requests. It does not instruct reading unrelated files, environment variables, or system paths. Network access and a Membrane account are explicitly required.
Install Mechanism
No install spec is embedded in the skill bundle (instruction-only). The doc recommends installing @membranehq/cli via npm (-g) or using npx; this is a normal approach but carries the usual trust risk of installing a third-party npm package globally. The package is from a named org (@membranehq), which is traceable; consider reviewing the package and repo before installing.
Credentials
The skill requests no environment variables or local secrets. It explicitly recommends NOT asking the user for API keys and instead uses Membrane to manage credentials server-side. This is proportionate, but it does mean you must trust Membrane with access to your WaveMaker account/data.
Persistence & Privilege
The skill does not request always:true or any elevated persistence. It is user-invocable and can be invoked autonomously per platform defaults, which is expected for a connector-style skill.
Assessment
This skill is instruction-only and coherent: it uses the Membrane CLI to access WaveMaker. Before installing or using it, decide whether you trust Membrane to mediate access to your WaveMaker instance (Membrane will hold credentials and proxy requests). If you proceed, inspect the @membranehq/cli package and its GitHub repo, prefer using a pinned version or npx if you don't want a global install, and verify the OAuth/connection flows during initial login. Because the skill contains no code files, the platform scanner had nothing to analyze—reviewing the external CLI is the important step.Like a lobster shell, security has layers — review code before you run it.
latestvk97cm80xwjdy3fyqfjttnn505s84fyc4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.