Ceipal
v1.0.0Ceipal integration. Manage data, records, and automate workflows. Use when the user wants to interact with Ceipal data.
⭐ 0· 65·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Ceipal integration) match the instructions: the SKILL.md consistently directs the user/agent to use Membrane to access Ceipal. Requiring a Membrane account and network access is reasonable for this integration.
Instruction Scope
Instructions focus on using the Membrane CLI to discover connectors/actions, run actions, and proxy Ceipal API requests. They do not instruct reading unrelated files, extracting unrelated credentials, or sending data to unexpected third-party endpoints beyond Membrane/Ceipal.
Install Mechanism
The skill is instruction-only (no install spec), but SKILL.md recommends installing @membranehq/cli globally via npm. Asking users to install a public npm CLI is expected for this workflow but is a moderate-risk operation compared to purely instruction-only usage—installing third-party CLIs should be done from trusted sources and can be done via npx to avoid global installs.
Credentials
The skill requests no environment variables or local secrets. It explicitly delegates credential management to Membrane (server-side), which is consistent with the stated best-practice of not asking the user for API keys.
Persistence & Privilege
The skill does not request persistent/always-on inclusion (always:false) and does not instruct modifying other skills or system-wide configs. Autonomous model invocation is allowed by default but there are no additional elevated privileges.
Assessment
This skill is coherent: it tells the agent to use the Membrane CLI to talk to Ceipal and does not request local secrets. Before installing, verify you trust Membrane (@membranehq) and its privacy/security posture because Membrane will broker access to Ceipal data. Prefer using npx @membranehq/cli@latest (or auditing the package) instead of a global npm install if you want to avoid persistent global binaries. Understand the browser-based auth flow grants Membrane access to the connected Ceipal account — review connection scopes and revoke access from your Membrane dashboard if needed. Finally, because the skill runs commands you or the agent will execute locally, avoid running these in sensitive environments without confirming the CLI version/source.Like a lobster shell, security has layers — review code before you run it.
latestvk9797k9f8dmr6kpqvacbpt31rd8445k7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.