Maestra
v1.0.2Maestra integration. Manage Organizations, Users. Use when the user wants to interact with Maestra data.
⭐ 0· 105·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill declares Maestra integration and all runtime instructions center on using the Membrane CLI to discover connectors, create connections, run actions, and proxy API requests to Maestra — this matches the described capability. The homepage and repository point to Membrane (the platform used to reach Maestra), which is coherent.
Instruction Scope
SKILL.md only instructs installing and using the Membrane CLI, authenticating via browser, listing connectors/actions, running actions, and proxying requests. It does not instruct reading unrelated files, requiring unrelated environment variables, or exfiltrating data to unknown endpoints beyond the Membrane/Maestra flows described.
Install Mechanism
The doc recommends installing @membranehq/cli via npm -g (and suggests occasional npx usage). This is expected for a CLI-based integration but carries the usual npm-global risks (install scripts run at install time, global filesystem changes). No obscure download URLs or archive extraction are used.
Credentials
No environment variables, config paths, or external credentials are requested by the skill. Authentication is delegated to Membrane's browser-based flow, which is proportionate to the integration.
Persistence & Privilege
The skill does not request always: true or any special persistent privileges and does not instruct modifying other skills or system-wide agent settings. Autonomous invocation remains enabled (platform default) but is not combined with other red flags.
Assessment
This skill is an instruction-only integration that asks you to install and use the @membranehq/cli to connect to Maestra. Before installing: (1) confirm you trust the @membranehq npm package (review its npm/github page and recent releases), since npm -g can run install scripts and writes system-wide files; (2) be prepared to authenticate via a browser-based flow (Membrane will hold the connection credentials); (3) review what actions you will run through the connector — Membrane will proxy API requests to Maestra, so any data you send through actions will go to that service. If you prefer tighter control, run the CLI in an isolated environment (container or throwaway VM) or inspect the CLI source before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk976vfjv880dw6m1k5x9dhtcjs84235q
License
MIT-0
Free to use, modify, and redistribute. No attribution required.