Marin Software

v1.0.0

Marin Software integration. Manage data, records, and automate workflows. Use when the user wants to interact with Marin Software data.

0· 36·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description say this integrates Marin Software and the SKILL.md only asks the agent/user to install and use the Membrane CLI and create a connection to Marin — these requirements match the stated purpose. No unrelated credentials, binaries, or system paths are requested.
Instruction Scope
Instructions are narrowly scoped to installing and using the Membrane CLI, discovering actions, running actions, and proxying requests to the Marin API via Membrane. Two items to note: (1) the skill assumes a networked environment and browser-based authentication to Membrane, which will broker credentials to Marin; (2) the SKILL.md tells users to run a global npm install (modifies the host) — this is expected but worth being aware of.
Install Mechanism
There is no formal install spec in the registry; instead the README instructs users to run `npm install -g @membranehq/cli`. That's a public npm package from the Membrane org (traceable), not a binary download from an unknown URL. The absence of a registry-level install spec means installation is manual and relies on the official npm package being used.
Credentials
The skill does not request environment variables, secrets, or config paths. Authentication is delegated to Membrane (browser OAuth / connection flow) which is proportionate for a third-party integration; users should understand that credentials are managed server-side by Membrane.
Persistence & Privilege
The skill does not request always:true or other elevated persistence; it is user-invocable and allows normal autonomous invocation. It does not modify other skills or request system-wide config access.
Assessment
This skill appears to be a thin integration that delegates auth and API calls to Membrane. Before installing or using it: (1) confirm you trust Membrane (getmembrane.com/@membranehq) because your Marin credentials and API calls will be brokered through their service; review what account/permission scopes you'll grant during the OAuth/connection flow; (2) install the official @membranehq/cli from the npm registry (verify package name and version) if you want the CLI functionality; (3) be aware the SKILL.md asks you to open a browser to authenticate — do this only if the redirect URL and domain look legitimate; (4) because the registry entry lists an unknown source/owner ID, prefer to verify the repository and vendor site (the SKILL.md points at a membrane GitHub org) before proceeding.

Like a lobster shell, security has layers — review code before you run it.

latestvk97c1vkscpna4sn23msptst6yh845e03

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments