ClawHub

Docomo Digital

v1.0.0

DOCOMO Digital integration. Manage data, records, and automate workflows. Use when the user wants to interact with DOCOMO Digital data.

⭐ 0· 25·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the instructions: the skill is a guide to interact with DOCOMO Digital via Membrane. Required capabilities (network access and a Membrane account) are appropriate for that purpose.
✓
Instruction Scope
SKILL.md only instructs use of the Membrane CLI (login, connect, list actions, run actions, proxy requests). It does not ask the agent to read arbitrary files, harvest environment variables, or exfiltrate data to unexpected endpoints.
ℹ
Install Mechanism
This is an instruction-only skill (no install spec). The doc asks users to install @membranehq/cli via npm (global install or npx). That is expected for a CLI-based integration, but the skill bundle does not perform or verify the install itself — users should verify the npm package origin and prefer scoped/local installs if they want to avoid global npm permissions.
✓
Credentials
The skill requests no environment variables, credentials, or config paths. It explicitly advises not to ask users for API keys and to let Membrane manage credentials, which is proportionate to the stated purpose.
✓
Persistence & Privilege
always is false and the skill does not request persistent or elevated system presence. Agent autonomous invocation is allowed by default but is not combined with broad credential access or other red flags.
Assessment
This skill is an instruction-only integration that relies on the Membrane CLI to access DOCOMO Digital. It's internally consistent, but before installing or running anything: (1) verify the @membranehq/cli package on npm (publisher and downloads) and prefer npx or a local install to avoid global npm permissions if you are cautious; (2) confirm the Membrane homepage/repository links (getmembrane.com and the GitHub repo) match the official project; (3) be prepared to complete OAuth-style browser logins (the CLI opens a browser and prints codes for headless flows); and (4) never paste sensitive keys into chat — this skill intends to avoid local secrets by using Membrane-managed connections. If you need higher assurance, ask for an install spec or signed release URLs for the CLI before proceeding.

Like a lobster shell, security has layers — review code before you run it.

latestvk972kc84zaqb93fxe5b469fdyh846ky6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments