Cockroachdb
v1.0.0CockroachDB integration. Manage data, records, and automate workflows. Use when the user wants to interact with CockroachDB data.
⭐ 0· 44·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill declares a CockroachDB integration and the SKILL.md consistently instructs the agent to use the Membrane CLI to discover connectors, create connections, run actions, or proxy requests to CockroachDB. The homepage/repository references Membrane and the required network/Membrane account are consistent with the stated functionality.
Instruction Scope
Runtime instructions stay within the integration scope: installing/using @membranehq/cli, logging in via browser, listing/creating connections, running actions, and (optionally) proxying API requests through Membrane. The only broad capability is the documented proxy feature (sending arbitrary paths/requests), which is expected for a flexible integration but means the user should be cautious about what endpoints/parameters they request.
Install Mechanism
There is no registry-level install spec (skill is instruction-only), but SKILL.md tells users to install a global npm package (@membranehq/cli) or use npx. Installing third-party global npm packages is a moderate-risk operation (supply-chain risk); this is expected for a CLI-based integration but worth verifying the package and source before installing.
Credentials
The skill requests no environment variables, no local credentials, and relies on Membrane to manage authentication server-side. That is proportionate to its purpose. Note: trusting Membrane implies trusting the remote service to hold and manage DB credentials.
Persistence & Privilege
The skill is not always-enabled, does not request persistent system-wide changes in the SKILL.md, and does not declare any elevated privileges. It instructs installing a CLI (user action) but does not modify other skills or system policies.
Assessment
This skill appears to be what it says: a CockroachDB integration that uses Membrane. Before installing or following the SKILL.md: (1) Verify you trust the Membrane service and the @membranehq/cli npm package (review the npm package page and the GitHub repo/release history). (2) Prefer using npx or a pinned package version rather than an undated global npm install to reduce supply-chain risk. (3) Be aware the Membrane proxy can make arbitrary requests to your CockroachDB endpoints — limit connector permissions and review what data the connector can access. (4) Do not provide other unrelated credentials; the skill explicitly says Membrane manages auth server-side. If you cannot verify the CLI package or you are uncomfortable delegating DB credentials to Membrane, treat this as unsafe to install.Like a lobster shell, security has layers — review code before you run it.
latestvk97dmwdq79gsecr5zeds3m0v8h84eg8k
License
MIT-0
Free to use, modify, and redistribute. No attribution required.