Active Trail
v1.0.2Active Trail integration. Manage data, records, and automate workflows. Use when the user wants to interact with Active Trail data.
⭐ 0· 116·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill states it integrates with Active Trail and all instructions revolve around installing and using the Membrane CLI to create connections, list/run actions, and proxy API requests. There are no unrelated credentials, binaries, or configuration paths requested.
Instruction Scope
SKILL.md stays on-topic: it instructs installing @membranehq/cli, logging in (browser-based), creating connections, listing actions, running actions, and proxying requests. It does not instruct reading unrelated files or environment variables, nor does it direct data to unexpected third-party endpoints beyond Membrane/Active Trail.
Install Mechanism
The bundle includes no install spec, but runtime instructions tell the user to run `npm install -g @membranehq/cli`. Installing a global npm package is expected for a CLI-based integration, but global installs require filesystem permissions (may need sudo on some systems) and install code from the public npm registry (moderate trust). No direct downloads from arbitrary URLs or archive extraction are instructed.
Credentials
The skill requires a Membrane account and network access but declares no environment variables or secrets. SKILL.md explicitly recommends letting Membrane handle credentials server-side and not asking users for API keys, which is proportionate to the stated purpose.
Persistence & Privilege
The skill is not forced-always and is user-invocable. It does not request persistent system-wide privileges or modify other skills' configs. Model invocation is allowed by default (normal for skills) and not combined with other concerning privileges.
Assessment
This skill is coherent: it uses the Membrane CLI to access Active Trail and does not ask for unrelated secrets. Before installing, verify the @membranehq/cli npm package (maintainer, download counts, recent activity) and be aware that `npm install -g` may require elevated privileges on your machine. Expect a browser-based login flow that grants Membrane access to your Active Trail account; review what account permissions you grant in that flow. On shared systems, prefer using a user-local install or a sandbox. If you need higher assurance, inspect the Membrane CLI repository and privacy/security docs before connecting sensitive accounts.Like a lobster shell, security has layers — review code before you run it.
latestvk972vstb0fc10ppk5s5tm7whzd843fm5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.