Mackerel
v1.0.0Mackerel integration. Manage data, records, and automate workflows. Use when the user wants to interact with Mackerel data.
⭐ 0· 50·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Mackerel integration) match the instructions: all actions are about using Membrane to connect to Mackerel, list actions, run actions, and proxy API calls. There are no unrelated credentials, binaries, or capabilities requested that would be out of scope for a monitoring integration.
Instruction Scope
All runtime instructions are confined to installing and using the Membrane CLI, logging in via browser, creating/inspecting connections, running actions, and proxying requests to the Mackerel API. This is appropriate for the stated purpose. Two practical notes: (1) the instructions require network access and a Membrane account even though the registry metadata didn't declare that externally, and (2) using the proxy means API requests and any data you send/receive will transit Membrane's service (see user guidance).
Install Mechanism
The skill is instruction-only (no install spec in the registry), but SKILL.md instructs installing @membranehq/cli via npm (npm install -g @membranehq/cli). Installing an npm package globally is a normal way to get a CLI, but it has moderate operational risk — you should verify the package, its publisher, and the repository before installing, especially on sensitive systems.
Credentials
The skill does not request any environment variables, local config paths, or other credentials in the registry. SKILL.md explicitly tells users not to provide API keys to the agent and to let Membrane manage auth, which is consistent with the declared lack of required secrets.
Persistence & Privilege
The skill is not always-enabled and does not request system-level persistence. It is user-invocable and allows normal autonomous invocation by the agent (the platform default), which is appropriate for an integration skill.
Assessment
This skill delegates authentication and proxying to the Membrane service and instructs you to install the @membranehq/cli npm package. Before installing or using it: (1) verify the Membrane service and @membranehq/cli package (review the npm page and GitHub repo) so you trust the operator, (2) be aware API calls and data will transit Membrane's servers and that Membrane will manage Mackerel credentials on your behalf, (3) avoid installing the global npm package on sensitive or production hosts — prefer isolated environments or review the package contents first, and (4) use least-privilege connections in Mackerel and audit access logs for sensitive data. If you need further assurance, ask for the exact package version, repository commit, or an install checksum before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk97cqc1k7rzykmvad4jvts4zan84cwqf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.