Neterium
v1.0.0Neterium integration. Manage data, records, and automate workflows. Use when the user wants to interact with Neterium data.
⭐ 0· 57·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (Neterium integration) align with instructions: the SKILL.md explains using the Membrane CLI to connect to Neterium, list actions, run actions, and proxy requests. All declared functionality (watchlists, profiles, requests) is achievable via Membrane and is coherent with the stated purpose.
Instruction Scope
Instructions are specific and scoped to installing and using the Membrane CLI, creating connections, discovering actions, running actions, and proxying API requests. The document does not instruct the agent to read unrelated files, harvest environment variables, or exfiltrate data to unexpected endpoints. It does rely on browser-based authentication and Membrane-managed auth flows (explicitly stated).
Install Mechanism
The registry has no automated install spec (lowest risk), but the SKILL.md instructs users to run a global npm install (npm install -g @membranehq/cli). That is a manual step that will install third-party code on the host if followed; it's expected for this integration but users should confirm the package source and integrity before running global installs.
Credentials
The skill declares no required environment variables, no credentials, and the instructions explicitly advise not to ask users for API keys. The approach (use Membrane to manage credentials server-side) is proportionate to the stated purpose. There are no unexpected credential requests in the instructions.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings in its instructions, and requires only an external CLI the user installs. Autonomous invocation is allowed (platform default) but not combined with other concerning privileges.
Assessment
This skill is coherent: it tells you to install and use the Membrane CLI to connect to Neterium and does not ask for unrelated secrets. Before installing or running any commands, verify the @membranehq/cli package and the Membrane service (check the official repository/package page, confirm publisher identity, and review recent package releases). Installing a global npm package runs third-party code on your machine — only proceed if you trust Membrane. Remember that Membrane will proxy requests and handle credentials server-side, so it will have access to any data you send through the connection; if that is sensitive, review Membrane's privacy/security documentation and consider least-privilege usage (restricting what you request/proxy). If you need higher assurance, ask the publisher for the official package checksum or verify the GitHub repo referenced in the SKILL.md before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk976467sa7ck1ajsscfemwcd0984c8a1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.