Mumara
v1.0.2Mumara integration. Manage Users, Organizations. Use when the user wants to interact with Mumara data.
⭐ 0· 117·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The SKILL.md describes integrating with Mumara and all runtime actions use the Membrane CLI and Membrane's connector/proxy functionality — this matches the stated goal. Requiring network access and a Membrane account is expected.
Instruction Scope
Instructions are focused on installing/using the Membrane CLI, creating connections, listing actions, running actions, and proxying requests to Mumara. The instructions do not tell the agent to read unrelated files, request unrelated credentials, or transmit data to unexpected endpoints beyond Membrane/Mumara.
Install Mechanism
The skill is instruction-only (no install spec), but the README recommends installing @membranehq/cli via npm -g (or using npx). Global npm installs can require elevated privileges; this is a normal, expected choice but carries the usual trust/privilege considerations for installing a third-party CLI from npm.
Credentials
No environment variables, secrets, or config paths are requested. The SKILL.md explicitly instructs to let Membrane manage credentials rather than asking for API keys locally, which is proportional to the integration purpose.
Persistence & Privilege
The skill is not always-enabled and does not request special persistent privileges. It does not instruct modifying other skills or system-wide settings. Autonomous invocation is allowed (platform default) but not combined with other concerning flags.
Scan Findings in Context
[no_regex_findings] expected: The static scanner found nothing because this is an instruction-only skill (no code files). That absence of findings is expected and not proof of safety; the SKILL.md is the primary artifact to review.
Assessment
This skill appears coherent: it relies on the Membrane CLI to authenticate and proxy requests to Mumara rather than asking you for Mumara API keys. Before installing, confirm you trust the Membrane provider (https://getmembrane.com) and understand that using the CLI will create a Membrane connection that can access your Mumara data. If you prefer not to install a global npm package, use the npx invocation shown in the docs. Be aware that proxying requests through Membrane means data you send will flow through their service — review their privacy/security docs if you plan to transmit sensitive data. Finally, global npm installs may require elevated privileges on your machine; run them only if you trust the package source.Like a lobster shell, security has layers — review code before you run it.
latestvk9780rahh6mt88azye71s0s751842w2k
License
MIT-0
Free to use, modify, and redistribute. No attribution required.