Whaly
v1.0.2Whaly integration. Manage data, records, and automate workflows. Use when the user wants to interact with Whaly data.
⭐ 0· 56·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with Whaly and the instructions exclusively use the Membrane CLI and Membrane proxy to reach Whaly; required capabilities map to the stated purpose.
Instruction Scope
SKILL.md only instructs installing and using the Membrane CLI, logging in via browser, creating connections, listing and running actions, and proxying requests to Whaly — all within the scope of interacting with Whaly data. It does not ask to read unrelated local files or sweep unrelated environment variables.
Install Mechanism
No install spec is registered with the skill (instruction-only), but the README tells users to run `npm install -g @membranehq/cli` (or use npx). Installing a global npm CLI is a normal but system-level action; it is a moderate-risk install vector compared with no install at all. Verify the npm package and publisher before installing.
Credentials
The skill declares no required env vars or credentials and explicitly advises letting Membrane manage auth rather than asking for API keys. Requested access (a Membrane account and network) is proportional to the task.
Persistence & Privilege
The skill does not request 'always' presence, does not modify other skills or system-wide agent settings, and does not declare persistent privileges beyond normal agent invocation.
Assessment
This skill is internally consistent: it uses the Membrane CLI to talk to Whaly and does not ask for unrelated secrets. Before installing or using it: (1) verify the @membranehq/cli package on the npm registry and confirm the maintainer/trustworthiness of getmembrane.com and the referenced GitHub repo, (2) prefer using `npx @membranehq/cli@latest` for one-off runs instead of a global npm install if you want lower system impact, (3) be aware you must log in to a Membrane account (browser auth) so Membrane will have access to the connected Whaly data, and (4) if you care about autonomous agent actions, remember the skill can be invoked by the agent (default behavior) — only allow it if you trust Membrane and the skill owner.Like a lobster shell, security has layers — review code before you run it.
latestvk973xd5x9bvd760ncr0r3za1qh843jgk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.