Kyvio
v1.0.2Kyvio integration. Manage Persons, Organizations, Deals, Leads, Projects, Activities and more. Use when the user wants to interact with Kyvio data.
⭐ 0· 89·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill says it integrates with Kyvio and the SKILL.md consistently instructs using the Membrane CLI to discover connectors, create connections, run actions, or proxy requests to Kyvio. There are no unrelated env vars, binaries, or config paths requested.
Instruction Scope
Instructions are limited to installing/using the @membranehq/cli, performing searches, creating connections, running actions, and proxying API calls. The doc explicitly advises not to ask users for Kyvio API keys. It does instruct browser-based authentication and sending requests through Membrane (i.e., external network traffic and credential handoff to Membrane). No guidance asks the agent to read local files or unrelated environment variables.
Install Mechanism
This is an instruction-only skill (no install spec in the registry), but SKILL.md tells users to run `npm install -g @membranehq/cli`. Installing a global npm package is a common pattern but executes third-party code on the host; the registry did not provide an automated install step or a pinned release URL to verify integrity.
Credentials
The skill declares no required env vars or credentials. However, it relies on Membrane to store and refresh Kyvio credentials server-side and to proxy API calls — a legitimate design choice for this integration but one that means Kyvio credentials and proxied request data will be handled by Membrane's service.
Persistence & Privilege
The skill does not request always:true, does not modify other skills' configs, and has no declared persistence or privileged system presence. It simply instructs use of a CLI and networked Membrane account.
Assessment
This skill appears coherent: it uses the Membrane CLI to access Kyvio and requests nothing unrelated. Before installing/using it, consider: (1) Trust — using it requires authenticating via Membrane and letting Membrane store/refresh your Kyvio credentials and proxy API calls, so review Membrane's privacy/security practices. (2) Install risk — the instructions recommend `npm install -g @membranehq/cli`; installing global npm packages runs third-party code on your machine, so prefer to audit the package, verify the npm/GitHub project, or ask an admin if on a shared system. (3) Least privilege — if possible, connect with an account that has limited access rather than full administrative credentials. (4) Network/data review — expect request/response data to transit/possibly be logged by Membrane; avoid sending highly sensitive data unless you trust the service and have reviewed its policies.Like a lobster shell, security has layers — review code before you run it.
latestvk976ngxgrthdh3tfjnwvxv70ms843cjm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.