Pubnub
v1.0.0PubNub integration. Manage data, records, and automate workflows. Use when the user wants to interact with PubNub data.
⭐ 0· 57·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with PubNub and all runtime instructions point to using the Membrane CLI to create a PubNub connection, list actions, and proxy requests. It does not request unrelated credentials or ask for unrelated system access.
Instruction Scope
SKILL.md instructs installing and using the @membranehq/cli, performing interactive login, creating connectors, running pre-built actions, or proxying arbitrary PubNub API requests via Membrane. The instructions do not ask the agent to read unrelated local files or environment variables. Note: proxying allows arbitrary requests to be sent to PubNub through Membrane, so any data sent in those requests will transit Membrane.
Install Mechanism
There is no formal install spec in the skill bundle (it is instruction-only). The instructions tell users/agents to run `npm install -g @membranehq/cli` which will download and install code from the npm registry; this is a user-executed step outside the registry metadata. This is expected for a CLI-based integration but is a meaningful side-effect (global package install) compared with an instruction-only skill that requires no installs.
Credentials
The skill declares no required environment variables and the instructions explicitly say not to ask users for API keys (Membrane handles auth server-side). The requirement of a Membrane account is proportional to the described behavior because Membrane will manage PubNub credentials and proxy requests.
Persistence & Privilege
The skill is not always-enabled (always: false) and does not request any special persistent system privileges or write to other skills' configurations. Autonomous model invocation is allowed (default) but this is expected for skills and not a standalone concern here.
Assessment
This skill appears coherent, but before installing or using it consider: (1) Membrane will act as an intermediary and will see any PubNub data you send through it — verify you trust getmembrane.com and review their privacy/security docs and the referenced repository. (2) Installing the CLI requires running `npm install -g` which modifies your system-level node packages; if you prefer, install it manually and inspect the package. (3) When creating the connector, review the scopes/permissions requested so you don't over-grant access to PubNub data. (4) Avoid pasting unrelated secrets into requests; the skill does not require local API keys but any data you pass through the proxy will be visible to Membrane. (5) If you need higher assurance, verify the official Membrane package and repository and test in a non-production account first.Like a lobster shell, security has layers — review code before you run it.
latestvk9742a8tndaze9cg9s4ra8rc7x844d5t
License
MIT-0
Free to use, modify, and redistribute. No attribution required.