Apache Superset
v1.0.0Apache Superset integration. Manage data, records, and automate workflows. Use when the user wants to interact with Apache Superset data.
⭐ 0· 32·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name and description match the instructions: it uses Membrane to integrate with Apache Superset. However, SKILL.md requires the Membrane CLI (npm install -g @membranehq/cli) and npx usage, while the registry metadata declares no required binaries — a minor inconsistency (it should list npm/node and/or membrane).
Instruction Scope
SKILL.md confines actions to using the Membrane CLI and its request proxy to call Superset APIs. It does not instruct reading unrelated files, environment variables, or exfiltrating data to unexpected endpoints. Authentication is handled via browser-based Membrane login, as documented.
Install Mechanism
No formal install spec in registry (instruction-only). The SKILL.md recommends installing a public npm package (@membranehq/cli) via npm -g or npx. This is an expected, traceable mechanism but carries the usual risks of installing a global npm package — moderate risk but proportional for a CLI integration.
Credentials
The skill requests no environment variables or local credentials; it delegates auth to Membrane (browser login). That is proportionate for a connector that uses an external gateway to manage tokens.
Persistence & Privilege
The skill is not always-on and does not request elevated platform privileges. It is user-invocable and can be invoked autonomously by the agent (default), which is normal for skills and not by itself a problem.
Assessment
This skill appears to be what it says: a Membrane-based connector to Apache Superset. Before installing, verify you trust the Membrane project and the @membranehq/cli npm package (review the package and its GitHub repo). Be aware SKILL.md expects you to install Node/npm (and run npm -g), but the registry metadata doesn't list required binaries — ensure you have a safe way to install CLI tools (consider installing locally via npx instead of globally). The skill uses browser-based login so you won't paste API keys, but you will grant Membrane access to your Superset connection — confirm permissions and audit the Membrane account settings. If you need higher assurance, request the skill author to add required-binaries metadata and an explicit statement of what Membrane accesses on your behalf.Like a lobster shell, security has layers — review code before you run it.
latestvk97aafkg2mdm7ss4539yyhk8ph84761g
License
MIT-0
Free to use, modify, and redistribute. No attribution required.