Okra
v1.0.2Okra integration. Manage data, records, and automate workflows. Use when the user wants to interact with Okra data.
⭐ 0· 46·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description claim an Okra integration and the SKILL.md exclusively documents using the Membrane CLI to discover connectors, create connections, run actions, and proxy requests to Okra. The dependence on Membrane (a proxy/connector service) is coherent with the described purpose.
Instruction Scope
Instructions are limited to installing the Membrane CLI, logging in, discovering connectors/actions, running actions, and proxying requests. They do not instruct reading local files or unrelated environment variables. Note: proxying API calls through Membrane means requests and Okra responses flow through Membrane's service — an important privacy/third-party data-flow implication.
Install Mechanism
No install spec is declared in the registry, but SKILL.md recommends installing @membranehq/cli via npm (npm install -g). Installing from the public npm registry is common and expected, but it does require installing a global package on the host (moderate operational risk).
Credentials
The skill declares no required environment variables or local credentials. Auth is delegated to Membrane (browser login flow). No unrelated secrets or config paths are requested. However, because Membrane performs server-side auth and proxying, the user should understand that Membrane will have access to Okra connection credentials and proxied data.
Persistence & Privilege
The skill does not request always: true and does not modify other skills or system-wide settings. It is user-invocable and can be invoked by the agent (default), which is expected for an integration skill. If you permit autonomous agent actions, the agent could call Membrane commands to interact with Okra — expected but worth awareness.
Assessment
This skill is an instruction-only wrapper that uses the Membrane CLI to access Okra (financial) data. Before using/installing: (1) confirm you trust Membrane (getmembrane.com) because Membrane will hold connection credentials and see proxied requests/responses; (2) be aware the SKILL.md asks you to install a global npm package (npm install -g @membranehq/cli) — only do this on machines you control; (3) if you allow the agent to act autonomously, it could run Membrane commands that query Okra data on your behalf, so restrict autonomous permissions or review actions before they run; (4) verify the Membrane CLI and the referenced GitHub repository are the official sources if you need higher assurance.Like a lobster shell, security has layers — review code before you run it.
latestvk97ct9std886ze3pehz0pq4f3s843h0v
License
MIT-0
Free to use, modify, and redistribute. No attribution required.