Librato
v1.0.0Librato integration. Manage data, records, and automate workflows. Use when the user wants to interact with Librato data.
⭐ 0· 54·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Librato integration) matches the instructions: install the Membrane CLI, create a Librato connector, and run actions or proxied requests. No unrelated env vars, binaries, or config paths are requested.
Instruction Scope
SKILL.md only instructs installing and using the Membrane CLI, logging in, listing/connecting actions, and proxying requests to Librato. It does not direct the agent to read unrelated files, exfiltrate data, or access environment variables beyond normal CLI auth flows.
Install Mechanism
No formal install spec in the skill bundle, but the instructions ask the user to run `npm install -g @membranehq/cli`. Installing a global npm package is a common but moderately risky operation (global packages run code on install). The package and publisher should be verified before installing.
Credentials
The skill requests no environment variables or credentials itself. It relies on a Membrane account and the Membrane service to manage Librato credentials; this is proportionate but requires trusting Membrane with access to the user's Librato data.
Persistence & Privilege
The skill is not always-enabled and does not request elevated or persistent platform privileges. Normal CLI-local authentication/state will be created by the Membrane client when you log in, which is expected behavior.
Assessment
This skill is mostly documentation for using the Membrane CLI to talk to Librato and is internally consistent. Before installing or using it: (1) verify the @membranehq/cli package and publisher (npm org, GitHub repo) to ensure you're installing the legitimate CLI, (2) understand that you will grant Membrane access to your Librato account (they will hold/refresh credentials), and (3) prefer installing the CLI in a controlled environment (container or VM) if you have concerns about global npm installs. If you need stronger assurance, review Membrane's privacy/security docs and the CLI source code on the linked repository prior to use.Like a lobster shell, security has layers — review code before you run it.
latestvk9726b0j476vdyz1pwmadgvp5d848hjm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.