Appsmith
v1.0.0Appsmith integration. Manage data, records, and automate workflows. Use when the user wants to interact with Appsmith data.
⭐ 0· 56·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name and description say this integrates with Appsmith; the SKILL.md consistently instructs use of the Membrane CLI to connect, list actions, run actions, and proxy Appsmith API calls. Required capabilities (network access, a Membrane account) are proportionate to the stated purpose.
Instruction Scope
Instructions are scoped to installing and using the Membrane CLI and performing Appsmith actions via Membrane (login flow, listing connections, running actions, proxying requests). This is within purpose, but it does direct traffic and authentication through a third-party (Membrane) rather than direct Appsmith API calls; users should be aware the proxy will handle auth and traffic.
Install Mechanism
There is no platform install spec; the SKILL.md tells the user to run `npm install -g @membranehq/cli`. Using an npm package for a CLI is reasonable for this integration, but installing global npm packages pulls code from the public registry (postinstall scripts are possible). This is expected but carries the usual npm-origin risks.
Credentials
The skill does not request environment variables, system config paths, or secrets. It explicitly instructs not to ask users for API keys and instead create connections through Membrane. The credential model described (browser-based Membrane login and server-side credential management) is consistent and proportionate.
Persistence & Privilege
The skill is instruction-only, has no install spec or code files, and is not set to always:true. It does not request persistent system-wide privileges or modify other skills' configurations. Autonomous invocation is enabled (platform default) but is not combined with other concerning privileges.
Assessment
This skill appears internally consistent: it uses the Membrane CLI to talk to Appsmith rather than storing or asking for raw API keys. Before installing or using it, verify you trust Membrane (https://getmembrane.com): review the @membranehq/cli npm package (publisher, recent versions, downloads, and repository), and understand that requests and credentials will be proxied through Membrane's service. If you handle sensitive Appsmith data, confirm what data Membrane will store or log and what permissions a created connection grants. When installing the CLI, prefer auditing the package and running it in an environment you control (or a container) if you want to limit risk. Finally, verify the skill publisher/source if provenance matters (the skill metadata lists an owner id but the skill source is 'unknown').Like a lobster shell, security has layers — review code before you run it.
latestvk978228wvd9c71g08fwpvwn8tx849cqd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.