Formdesk
v1.0.2Formdesk integration. Manage Forms, Users, Themes, Workspaces. Use when the user wants to interact with Formdesk data.
⭐ 0· 81·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions: all actions are executed via the Membrane CLI and Membrane connectors to Formdesk. Required capabilities (network access, Membrane account, Membrane CLI) are proportional to a Formdesk integration.
Instruction Scope
SKILL.md instructs installation and use of the Membrane CLI, creating/using a Formdesk connection, listing actions, running actions, and proxying requests through Membrane. It does not instruct reading unrelated files or environment variables, nor does it direct data to unexpected external endpoints outside the stated Membrane/Formdesk flow.
Install Mechanism
Installation is an npm global package (npm install -g @membranehq/cli). This is a common distribution method for CLIs but carries the usual npm risks (you should verify the package on the registry/GitHub before installing). There is no archive download from an arbitrary host and no code is written by the skill itself.
Credentials
The skill declares no required env vars or credentials. It relies on Membrane to perform auth and credential refresh. This is proportionate, but it does mean you must trust Membrane with your Formdesk access when creating the connector.
Persistence & Privilege
always: false and no install-time persistence or modification of other skills/system configs. The skill may be invoked autonomously (platform default), which is expected behavior and not a red flag by itself.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to connect to Formdesk. Before installing, verify the @membranehq/cli package on npm/GitHub to ensure you trust the publisher. Understand that creating a Membrane connector grants Membrane (their service) the ability to access your Formdesk account on your behalf — review Membrane's privacy, security docs, and the connector's requested scopes. Installing the CLI globally requires npm privileges; run it in an environment you control, and test on non-production data if possible. Finally, be cautious when running arbitrary proxy calls (membrane request ...) since those can invoke any Formdesk endpoint via the connector; review generated commands before execution.Like a lobster shell, security has layers — review code before you run it.
latestvk97afcyk39rxphvk0zzb61bm6s842b8s
License
MIT-0
Free to use, modify, and redistribute. No attribution required.