Actindo
v1.0.0Actindo integration. Manage data, records, and automate workflows. Use when the user wants to interact with Actindo data.
⭐ 0· 28·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with Actindo and all runtime instructions use the Membrane CLI to discover connections, run actions, and proxy requests to Actindo — that matches the stated purpose. Minor inconsistency: the registry metadata lists no required binaries, but SKILL.md expects the 'membrane' CLI (installed via npm or invoked via npx).
Instruction Scope
SKILL.md confines actions to installing/using the Membrane CLI, performing login flows, creating connections, listing/running actions, and proxying API calls to Actindo. It does not instruct reading unrelated files, system paths, or environment variables, nor does it instruct sending data to unexpected third-party endpoints (requests go through Membrane to Actindo).
Install Mechanism
The skill is instruction-only (no install spec in the registry). It instructs users to install the Membrane CLI via 'npm install -g @membranehq/cli' or run via 'npx', which is a common but moderate-risk mechanism (pulls code from the npm registry at install/run time). This is expected for a CLI-based integration but the registry metadata could have declared the required binary.
Credentials
No environment variables or extra credentials are requested by the skill; authentication is delegated to Membrane's browser-based login/connection flow, which is proportional for this use case. The user should understand that Membrane will hold the connection credentials and that requests will be proxied through Membrane's service.
Persistence & Privilege
The skill does not request persistent or elevated platform privileges (always is false), does not declare config paths, and is user-invocable only. Nothing in the instructions modifies other skills or system-wide settings.
Assessment
This skill is coherent: it relies on the Membrane CLI to connect to Actindo and manages auth via a browser login. Before installing/using it, consider: (1) you will need to install the Membrane CLI (npm global or npx) even though the registry metadata did not declare a required binary; (2) Membrane will broker and store connection credentials and proxy API requests — confirm you trust Membrane (review their privacy/security docs and the package maintainer on npm/GitHub); (3) using 'npx' pulls the latest CLI each run, which can change behavior over time—pin a version if you need stability; and (4) review Actindo account permissions you grant when creating the Membrane connection so the integration has only necessary access.Like a lobster shell, security has layers — review code before you run it.
latestvk97cs7g2q2z32rkeasef1yng2d847fdz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.