Pdffiller
v1.0.2PdfFiller integration. Manage Accounts. Use when the user wants to interact with PdfFiller data.
⭐ 0· 129·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to integrate with PdfFiller and all runtime steps use the Membrane CLI to connect, discover actions, and proxy requests to PdfFiller — this is coherent. Minor mismatch: the registry lists no required binaries, yet SKILL.md expects npm/node (to install @membranehq/cli) and a browser for login.
Instruction Scope
Instructions stay inside the PdfFiller use case (connect, list actions, run actions, proxy requests). However the SKILL.md explicitly recommends using Membrane's proxy to send arbitrary paths to the PdfFiller API — that means your request payloads and API responses will pass through Membrane's servers, which is a privacy/security consideration outside the skill's stated scope.
Install Mechanism
No formal install spec is declared in the registry, but SKILL.md instructs installing @membranehq/cli via npm (global). This is a normal approach but has moderate risk (public npm package, global install). The skill does not provide checksums or pinned versions; review the npm package and publisher before installing.
Credentials
The skill does not request environment variables or secrets. It requires a Membrane account (handled via browser login) which is proportionate to using the Membrane-hosted connector flow. No unrelated credentials are requested.
Persistence & Privilege
The skill does not request always:true or any special persistent privileges and is user-invocable only. It does not instruct modifying other skills or system-wide settings.
Assessment
This skill appears to be what it says: a PdfFiller integration that relies on the Membrane CLI. Before installing, confirm you trust Membrane (getmembrane.com and the @membranehq/cli npm package) because Membrane will broker authentication and proxy API requests — meaning your document data and API calls will flow through their service. Also ensure you have Node/npm and are comfortable installing a global npm CLI. If you need stronger guarantees, review the @membranehq/cli package on npm/github, check its maintainer, review Membrane's privacy/security docs, and prefer installing a specific pinned version rather than an unpinned global install.Like a lobster shell, security has layers — review code before you run it.
latestvk977vs2e08djqvwznx790gtxmx843mh9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.