Demandbase
v1.0.0DemandBase integration. Manage data, records, and automate workflows. Use when the user wants to interact with DemandBase data.
⭐ 0· 76·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Demandbase integration) match the instructions: the SKILL.md explains how to use the Membrane CLI to connect to Demandbase, list/run actions, and proxy requests. Required resources (network access, Membrane account, CLI) are appropriate for this purpose.
Instruction Scope
Instructions stay on-task: they tell the agent to install/run the Membrane CLI, perform browser-based login, create connections, list actions, run actions, and proxy raw requests. Important privacy/operational note: proxying sends API requests through Membrane's servers (the skill explicitly says Membrane will inject auth headers and proxy requests), so Demandbase data and request payloads transit a third-party service.
Install Mechanism
No install spec in the registry, but SKILL.md asks the user to run `npm install -g @membranehq/cli` (and uses `npx` in examples). Installing a global npm CLI is a common pattern but has moderate risk (executing code from npm with system-level install). This is expected for a CLI-based integration but users should verify the package source and legitimacy before installing globally.
Credentials
The skill requests no environment variables or local credentials and explicitly tells users not to share API keys; authentication is handled via Membrane's browser login and server-side credential management. This is proportionate, but it does centralize credential custody with Membrane, which the user should accept before using the skill.
Persistence & Privilege
always is false and the skill has no install script or code writing to disk in the bundle (instruction-only). It does not request elevated/system-wide configuration or other skills' credentials. Normal autonomous invocation is allowed (platform default).
Assessment
This skill appears to do what it says: it uses the Membrane CLI to connect to Demandbase. Before installing/using it consider: (1) Membrane will proxy your API calls and store/manage credentials server-side — review Membrane's privacy, security, and data-retention policies; (2) verify the npm package and GitHub repository (@membranehq/cli) are legitimate before running a global npm install; (3) prefer using npx or local installs if you want to avoid global package installs; (4) run the commands in a trusted environment (the login opens a browser and issues tokens) and don't paste secrets into the tool unless you understand where they are stored. If you need greater assurance, request the upstream package's provenance (npm/GitHub links), or use a Membrane account with least-privilege access.Like a lobster shell, security has layers — review code before you run it.
latestvk97edq4fg2af63h5kx0s4tbhh9845pte
License
MIT-0
Free to use, modify, and redistribute. No attribution required.