Nulab
v1.0.0Nulab integration. Manage data, records, and automate workflows. Use when the user wants to interact with Nulab data.
⭐ 0· 55·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The SKILL.md describes Nulab integration and all runtime steps rely on the Membrane CLI (install, login, create/connect to a Nulab connector, run actions or proxied requests). Required capabilities and tools align with the stated purpose—no unrelated credentials, binaries, or platform access are requested.
Instruction Scope
Instructions are limited to installing and using the Membrane CLI, creating a connection, listing actions, running actions, and optionally proxying requests to the Nulab API via Membrane. The document does not instruct reading unrelated files, secret exfiltration, or contacting unexpected endpoints beyond Membrane and Nulab.
Install Mechanism
The skill recommends installing @membranehq/cli globally via npm (npm install -g). This is a public npm package install (moderate-risk install mechanism) and will write binaries to the host. This is expected for a CLI-centered skill, but users should be aware of the normal risks of installing third-party npm packages globally (review publisher, version pinning, and integrity).
Credentials
No environment variables or direct API keys are requested by the skill, which is proportionate. However, the Membrane service will act as a proxy and hold the Nulab credentials after the user authenticates via the CLI/browser flow—users should be comfortable granting Membrane access to their Nulab account and review its privacy/permissions.
Persistence & Privilege
The skill is not always-enabled, is user-invocable, and does not request elevated platform privileges or modify other skills. The normal CLI login will create local tokens for the Membrane CLI (expected behavior) but the skill does not request persistent platform-level privileges beyond that.
Assessment
This skill is coherent: it tells you to install the public @membranehq CLI and use it to create a Nulab connection so Membrane can proxy requests. Before installing, verify you trust @membranehq (check the npm package page and GitHub repo), consider installing in a controlled environment (or pin a specific version), and review Membrane's privacy/security docs because it will mediate access to your Nulab data after you authenticate. Do not provide Nulab API keys manually—the skill explicitly says to use the automated login flow. If you need stronger assurance, inspect the npm package contents or run the CLI in an isolated container or VM before using it with production data.Like a lobster shell, security has layers — review code before you run it.
latestvk97bsg6tkha94zkbadyr1v5mds84b72x
License
MIT-0
Free to use, modify, and redistribute. No attribution required.