Docugenerate
v1.0.2DocuGenerate integration. Manage Documents, Templates. Use when the user wants to interact with DocuGenerate data.
⭐ 0· 105·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name and description match the instructions: it describes managing DocuGenerate via the Membrane platform. It does not request unrelated credentials, binaries, or config paths.
Instruction Scope
SKILL.md only tells the agent/operator to install and use the @membranehq/cli, log in, create or find a DocuGenerate connection, run predefined actions, or proxy arbitrary DocuGenerate API calls through Membrane. It does not instruct reading unrelated files, scanning the system, or exfiltrating data outside the Membrane flow.
Install Mechanism
There is no manifest install spec, but the instructions tell the user to run `npm install -g @membranehq/cli`. Installing a global npm package executes code and writes to the system; this is expected for a CLI but you should only install packages from maintainers you trust and review their package/release if concerned.
Credentials
The skill declares no required env vars or credentials and explicitly advises letting Membrane handle auth. This is proportionate. One implication: Membrane server-side connections will hold the service credentials, so trust in Membrane (and the connector) is necessary.
Persistence & Privilege
The skill is instruction-only, not always-enabled, and does not request persistent agent-wide privileges or modify other skills. Autonomous invocation is allowed (default) but that is normal for skills and not, by itself, a concern.
Assessment
This skill is coherent: it instructs use of the Membrane CLI to manage DocuGenerate and does not ask for unrelated secrets. Before installing, verify you trust the publisher and the @membranehq/cli package (review the npm package and the repository if needed). Remember that Membrane will hold and use connection credentials server-side and can proxy arbitrary API calls — if you need tighter control over credentials or want to avoid installing a global npm package, consider asking for an alternative integration method or have an administrator perform the install.Like a lobster shell, security has layers — review code before you run it.
latestvk972fr8n0cjp73ccg4111rxxgd843w4w
License
MIT-0
Free to use, modify, and redistribute. No attribution required.