Workato
v1.0.2Workato integration. Manage data, records, and automate workflows. Use when the user wants to interact with Workato data.
⭐ 0· 72·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is described as a Workato integration and all instructions show how to use the Membrane CLI to connect to Workato, run actions, and proxy API requests. There are no unrelated environment variables, binaries, or config paths requested.
Instruction Scope
Runtime instructions direct the agent (and the user) to install and use the Membrane CLI, log in via browser, create/list connections, run actions, and proxy requests to Workato. The scope stays within interacting with Workato via Membrane, but the proxy capability allows arbitrary API paths — so the user must trust Membrane to hold and use credentials and to proxy arbitrary requests on their behalf.
Install Mechanism
There is no install spec in the skill bundle (instruction-only). The README instructs users to run `npm install -g @membranehq/cli`. Installing a global npm package is a normal step for a CLI, but it requires trusting the npm package publisher and that the package is legitimate and safe.
Credentials
The skill declares no environment variables or credentials. It does require a Membrane account and OAuth-style browser login for the Workato connection, which is proportional to the task. Be aware that Membrane will store/refresh the connection tokens and therefore will have access to the connected Workato account(s).
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and is user-invocable. It does not ask for elevated agent privileges or persistent global configuration beyond the normal Membrane CLI login flow.
Assessment
This skill is coherent for Workato integration and uses the Membrane CLI as a proxy/adapter. Before installing or using it: (1) verify the legitimacy of @membranehq/cli (check its npm page, GitHub repo, and the getmembrane.com site), (2) be aware that logging in gives Membrane stored access tokens to your Workato account — only proceed if you trust that service, (3) avoid installing global packages from untrusted sources, and (4) review Membrane's privacy/permissions and any tokens it will create, since the proxy can send arbitrary API requests on your behalf.Like a lobster shell, security has layers — review code before you run it.
latestvk978tz6yxjffh30jh24e79r519842a80
License
MIT-0
Free to use, modify, and redistribute. No attribution required.