Armoryio
v1.0.2Armory.io integration. Manage data, records, and automate workflows. Use when the user wants to interact with Armory.io data.
⭐ 0· 83·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The SKILL.md consistently describes interacting with Armory.io and instructs the agent to use the Membrane CLI as the integration layer. There are no unrelated credentials, binaries, or config paths requested by the skill that would be inconsistent with an Armory integration.
Instruction Scope
The instructions stay within the stated purpose: installing and using @membranehq/cli to create connections, list/run actions, and proxy arbitrary Armory API calls. This proxy capability is powerful (it can send arbitrary requests to the Armory API via Membrane), which is expected for a generic integration but worth being aware of. The instructions do not direct reading local files or unrelated environment variables.
Install Mechanism
The skill is instruction-only and has no install spec. It asks the user to install a global npm package (npm install -g @membranehq/cli). That is a normal way to obtain a CLI but carries the usual risks of installing global npm packages — verify the package source and trustworthiness before installing, especially on shared or production machines.
Credentials
The skill declares no required env vars or credentials. It relies on Membrane to handle authentication via an interactive login flow (browser or headless code). That is proportionate for a CLI-based integration. Note: the Membrane CLI will persist auth state/refresh tokens locally as part of normal operation — the SKILL.md does not describe where or how those credentials are stored.
Persistence & Privilege
The skill does not request 'always' presence and does not include install scripts or other components that would persist in the agent runtime. Autonomous invocation is allowed by platform default but is not elevated by this skill.
Assessment
This skill appears to do what it says: it teaches you to use the Membrane CLI to interact with Armory.io. Before installing or using it, verify the @membranehq/cli package and the getmembrane.com project are trustworthy (check the upstream repo, maintainers, and npm publisher). Installing a global npm package requires write access to your system and can be risky on shared/production machines — consider installing in an isolated environment. Be aware that Membrane's proxy facility can issue arbitrary API requests on your behalf and the CLI will persist authentication tokens locally; confirm where credentials are stored and limit scope/permissions of the account you use. If you need higher assurance, request the skill author publish source code or an official package link you can audit.Like a lobster shell, security has layers — review code before you run it.
latestvk97053eh00rbf3sfeep1hz1yr5843c0h
License
MIT-0
Free to use, modify, and redistribute. No attribution required.