Cacoo
v1.0.0Cacoo integration. Manage data, records, and automate workflows. Use when the user wants to interact with Cacoo data.
⭐ 0· 52·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with Cacoo and its SKILL.md exclusively instructs use of the Membrane CLI and Membrane's proxy to access the Cacoo API. Requesting the Membrane CLI and a Membrane account is consistent with that purpose.
Instruction Scope
Instructions are limited to installing and using @membranehq/cli, creating a connection, running discovered actions, or proxying requests via Membrane. They do not instruct reading local files or unrelated environment variables. Important: proxied requests and authentication are handled by Membrane’s servers — Cacoo data and API calls will transit Membrane (an external third party), which is a privacy/trust consideration the user should be aware of.
Install Mechanism
This is an instruction-only skill (no install spec in registry) that tells users to run npm install -g @membranehq/cli. Using a published npm CLI is reasonable for this integration but carries the usual npm-global risk (postinstall scripts, permission to run code on the machine).
Credentials
The skill declares no required env vars or credentials and its instructions rely on interactive Membrane login rather than asking for API keys. The level of credential access requested (a Membrane account + browser login) is proportionate to the described integration.
Persistence & Privilege
always is false and there is no install-time modification of other skills or system-wide configs described. The skill can be invoked autonomously (platform default), which is normal; note that autonomous invocation combined with broad access would be worth scrutinizing, but that is not present here.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to access the Cacoo API. Before installing: (1) confirm you trust Membrane (https://getmembrane.com) because API calls and credentials are proxied through their service, so Cacoo data will transit their infrastructure; (2) be aware the instructions recommend installing a global npm package (@membranehq/cli) — npm packages run code on install, so install from the official package and review its source if you require stricter assurance; (3) the skill does not request local secrets or unrelated credentials, which is good. If you need to avoid third-party transit, prefer direct API usage under your own credentials instead of the proxy approach.Like a lobster shell, security has layers — review code before you run it.
latestvk973m6b6hh8hec3nrjszsbscgs84d90f
License
MIT-0
Free to use, modify, and redistribute. No attribution required.