Rasa
v1.0.2Rasa integration. Manage Assistants. Use when the user wants to interact with Rasa data.
⭐ 0· 70·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description claim Rasa integration; SKILL.md consistently describes using Membrane to manage Rasa connectors, list/run actions, and proxy API requests. Required capabilities (network + Membrane account) match the stated purpose; no unrelated credentials or binaries are requested.
Instruction Scope
Runtime instructions are limited to installing and using the Membrane CLI, performing login in-browser, creating/listing connections, running actions, and proxying requests to Rasa. The instructions do not ask the agent to read arbitrary local files, other environment variables, or send data to unexpected endpoints outside Membrane/Rasa.
Install Mechanism
This is an instruction-only skill that tells the user to run 'npm install -g @membranehq/cli'. That is a public npm package install (no direct download URLs), which is reasonable for this workflow but does require elevated sys privileges for a global npm install — verify the package source and intended version before installing globally.
Credentials
The skill declares no environment variables or credentials; it relies on Membrane-managed auth (browser login). That is proportionate for a connector/proxy integration. Note: using Membrane means auth tokens and proxied request headers are handled server-side by Membrane, so no local API keys are required.
Persistence & Privilege
The skill is not marked always:true and is user-invocable. It is instruction-only and does not request persistent system changes or access to other skills' configs.
Assessment
This skill appears coherent: it uses the Membrane CLI to connect to and proxy requests to Rasa, which justifies the npm CLI install and browser login. Before installing, verify you trust the Membrane project and the @membranehq/cli npm package (check the package page/repo and the homepage), and be aware that proxied requests and credential handling occur via Membrane's service — your Rasa data and API calls will transit Membrane's infrastructure. If you must avoid third-party proxies for privacy or compliance, do not use this skill. For global npm installs, prefer installing in a controlled environment or using a local/npx invocation to avoid modifying system-wide state.Like a lobster shell, security has layers — review code before you run it.
latestvk97bg2vmenxfzkwj6rykeantbs843txf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.