Column
v1.0.0Column integration. Manage data, records, and automate workflows. Use when the user wants to interact with Column data.
⭐ 0· 31·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (Column integration) matches the instructions: the skill tells the agent to use the Membrane CLI to connect to Column, discover actions, run actions, and proxy requests. Requesting a Membrane account and network access is appropriate for this purpose.
Instruction Scope
SKILL.md limits runtime actions to installing/using the Membrane CLI, creating/listing connections, running actions, and proxying requests. It does not instruct reading unrelated files or environment variables, nor exfiltrating data to unexpected endpoints. It explicitly advises not to ask users for API keys and to let Membrane handle auth.
Install Mechanism
There is no automated install spec in the skill bundle (instruction-only). The SKILL.md instructs users to run `npm install -g @membranehq/cli` (or use npx). Installing a third-party CLI globally has normal supply-chain risks (postinstall scripts, npm package authenticity). This is expected for a CLI-based integration but you should verify the package and author on the npm registry before installing.
Credentials
The skill declares no required environment variables or config paths. It requires a Membrane account and network access, which are proportionate. The instructions rely on Membrane to manage credentials server-side rather than asking for direct API keys, which reduces local credential exposure.
Persistence & Privilege
The skill is not always-enabled and is user-invocable; there is no indication it requests persistent elevated privileges or modifies other skills. It is instruction-only so it does not install background services by itself.
Assessment
This skill is instruction-only and coherent: it tells the agent to use the Membrane CLI to connect to Column. Before following instructions, verify you trust Membrane/@membranehq on the npm registry (package owner, recent versions, reviews) because the CLI will mediate access to your Column data. Prefer using npx or installing locally if you want to avoid a global npm install. Remember that Membrane will handle authentication server-side — that means Membrane will see and act on the data you send through it, so confirm their privacy/security posture. If you prefer not to use a third-party proxy, you can instead use Column's own API directly (but then you will need to manage API keys). Finally, note the skill source is listed as unknown in the registry metadata; exercise the usual caution for third-party skills and confirm the homepage/author links and package ownership before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk97ejjn8jdbphgwdg38kgfmmr98465b4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.