Klaro App
v1.0.0Klaro app integration. Manage data, records, and automate workflows. Use when the user wants to interact with Klaro app data.
⭐ 0· 25·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description (Klaro app integration) match the instructions: all actions are performed via the Membrane CLI and Membrane connections/requests, which is a reasonable way to integrate with Klaro. The declared homepage and repository references align with Membrane.
Instruction Scope
SKILL.md limits runtime behavior to installing/using the Membrane CLI, performing login/connect/action/request commands, and discovering actions. It does not instruct reading unrelated files, environment variables, or transmitting data to endpoints outside of Membrane/Klaro.
Install Mechanism
Install steps recommend a global npm install of @membranehq/cli. This is appropriate for a CLI-driven skill but has the usual npm-global risks (package runs install scripts on install). The doc also suggests npx in examples, which is a lower-friction alternative; verify the package and publisher on npm/github before installing globally.
Credentials
The skill declares no required env vars or credentials and explicitly advises against asking users for API keys, relying on Membrane-managed auth instead. The need for a Membrane account and network access is proportional to the described functionality.
Persistence & Privilege
No always:true or other elevated persistence flags. The skill is user-invocable and can run autonomously per platform defaults, which is expected for integrations that can perform actions via a CLI.
Assessment
This skill is coherent but depends on the third-party Membrane CLI and your Membrane account. Before installing: (1) verify the @membranehq/cli package and publisher on npm and the linked GitHub repo, (2) prefer using npx or a local install if you want to avoid a global npm install, (3) be aware that using the proxy (membrane request) will route request bodies and auth through Membrane — don't send secrets you don't want transmitted, and (4) confirm that getmembrane.com / the Membrane service is trustworthy for your data and compliance needs.Like a lobster shell, security has layers — review code before you run it.
latestvk97bt9j909b8bcz62j8s5mvens846gxy
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
