Hasdata
v1.0.0Hasdata integration. Manage data, records, and automate workflows. Use when the user wants to interact with Hasdata data.
⭐ 0· 53·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with Hasdata and all runtime instructions use the Membrane CLI and Membrane-managed connections to talk to Hasdata — this matches the stated purpose. The homepage, repository and referenced docs are consistent with a Membrane-based connector.
Instruction Scope
SKILL.md stays on-topic: it tells the agent how to install/use the Membrane CLI, create connections, list actions, run actions, and proxy requests to Hasdata. It does not instruct reading local secrets, scanning unrelated files, or exfiltrating data to unexpected endpoints. It does recommend opening a browser for authentication (and gives a headless flow), which is expected for OAuth-like flows.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but the doc instructs installing @membranehq/cli globally via npm and also shows using npx in places. Installing a global npm package is a normal but non-trivial step (requires npm, may require elevated permissions); this is expected for a CLI-driven integration but worth noting to users.
Credentials
The skill declares no required env vars, no config paths, and no credentials. Authentication is delegated to Membrane (browser login and connection objects). There are no unexplained secrets requested by the skill.
Persistence & Privilege
always is false and autonomous invocation is allowed (platform default). The skill does not request persistent privileges or modify other skills' configs. As with any network-capable skill, autonomous invocation allows it to make outbound API calls when triggered, which is expected for an integration skill.
Assessment
This skill appears to do what it says: it uses Membrane's CLI to connect to Hasdata and does not ask for unrelated credentials. Before installing, consider: 1) prefer using npx (shown in the doc) or installing the CLI in a controlled environment rather than a system-wide global npm install if you want to avoid changing your system; 2) confirm the @membranehq/cli package and its GitHub repo are the official sources and review their permissions and code if you need high assurance; 3) expect a browser-based OAuth flow — review the scopes and consent screen that Membrane/Hasdata present during login; 4) remember that allowing autonomous invocation means the skill can make network calls when triggered by the agent — limit agent permissions or usage if you want tighter control. Overall the skill is internally consistent and proportionate.Like a lobster shell, security has layers — review code before you run it.
latestvk97aw9y26t8cf1mp0rypmakzms84dejh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.