Dashbotio
v1.0.0Dashbot.io integration. Manage data, records, and automate workflows. Use when the user wants to interact with Dashbot.io data.
⭐ 0· 62·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The SKILL.md's declared purpose (Dashbot.io integration) matches the instructions (use Membrane CLI to connect, list actions, run actions, or proxy API requests). One small mismatch: the skill metadata lists no required binaries, but instructions require npm (to install the CLI) and the membrane CLI binary to be present.
Instruction Scope
Instructions stay on-topic: they describe installing and using the Membrane CLI to authenticate, create a connection to Dashbot.io, list and run actions, or proxy raw API requests. The instructions do not ask the agent to read unrelated files or environment variables. Important note: proxying via Membrane means request payloads and Dashbot.io data are transited/handled by the Membrane service.
Install Mechanism
There is no automated install spec in the package metadata, but SKILL.md instructs users to run 'npm install -g @membranehq/cli'. That is a public npm package install (moderate risk): it will write binaries to disk and execute code from the npm package when used. The instruction is expected for this integration but users should verify the package source and publisher before installing.
Credentials
The skill requests no environment variables or local credentials and relies on Membrane's browser-based auth/connection flow. This is proportionate to the described task. However, using Membrane means credentials and proxied traffic are managed server-side by Membrane, so trust in that service is necessary.
Persistence & Privilege
The skill is instruction-only, does not request always-on privileges, and does not modify other skills or system-wide configs. It is user-invocable and does not claim autonomous always-enabled behavior.
Assessment
Before installing/using this skill: 1) Understand that it requires installing the @membranehq/cli npm package globally — verify the package publisher, check the package's npm and GitHub pages, and prefer installing only from trusted accounts. 2) Membrane acts as a proxy and manages Dashbot.io credentials server-side: your Dashbot.io requests and data will transit/ be handled by Membrane — if that is sensitive, confirm Membrane's privacy/security posture and terms. 3) The SKILL.md omits declaring required binaries (npm and membrane) in metadata; ensure your environment can safely run global npm installs. 4) If you need stronger assurance, review the Membrane CLI source or run it in an isolated environment before giving it access to production data.Like a lobster shell, security has layers — review code before you run it.
latestvk976kegcq2p64t6gyw62y8er4s845y4x
License
MIT-0
Free to use, modify, and redistribute. No attribution required.