ClawHub

Nmbrs

v1.0.0

Nmbrs integration. Manage data, records, and automate workflows. Use when the user wants to interact with Nmbrs data.

⭐ 0· 58·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (Nmbrs integration) matches the instructions: the SKILL.md explains how to use the Membrane CLI to connect to Nmbrs, discover actions, run actions, and proxy API requests. Requiring a Membrane account and the Membrane CLI is coherent with the stated purpose.
✓
Instruction Scope
Runtime instructions stay on-topic: they direct the user/agent to install/run the Membrane CLI, log in, create or list connections, list and run actions, and proxy requests to the Nmbrs API. The instructions do not ask the agent to read unrelated local files or to fetch arbitrary external endpoints beyond the Membrane/Nmbrs workflow.
ℹ
Install Mechanism
This is an instruction-only skill (no install spec). The SKILL.md recommends installing @membranehq/cli globally via npm (npm install -g @membranehq/cli). That is a normal pattern but introduces standard npm supply-chain considerations; there is no download from unknown URLs or extract-from-archive behavior in the skill itself.
✓
Credentials
The skill declares no required environment variables or credentials. SKILL.md explicitly instructs not to collect API keys locally and to use Membrane connections (server-side auth). No unrelated secrets or system config paths are requested.
✓
Persistence & Privilege
always: false and no install mechanism that writes persistent files on the agent were declared. The skill does not request elevated platform privileges or modify other skills' configurations.
Assessment
This skill is coherent with its stated purpose, but before installing or using it: - Verify you trust the @membranehq/cli npm package (check the package page, publisher, and the GitHub repo referenced in SKILL.md). - Be aware that Membrane is a proxy service: data sent via the CLI will go to Membrane and then to Nmbrs (so review their privacy/security posture if you will be sending sensitive HR/payroll data). - Follow the SKILL.md login flow rather than pasting credentials into the agent; the skill explicitly delegates auth to Membrane. - Because the skill is instruction-only, the main supply-chain risk is the npm package you install; prefer official packages and verify repository/source if you are security-conscious.

Like a lobster shell, security has layers — review code before you run it.

latestvk9730hh9vwc59v2k0t3s71mx4584c2st

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments