Ravelin
v1.0.2Ravelin integration. Manage data, records, and automate workflows. Use when the user wants to interact with Ravelin data.
⭐ 0· 66·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Ravelin integration) matches the instructions: all runtime steps use the Membrane CLI to discover connectors, create connections, run actions, or proxy requests to Ravelin. Nothing requested (no env vars, no config paths) is unrelated to that purpose.
Instruction Scope
SKILL.md instructs the agent to install and use the Membrane CLI, perform OAuth-style login, create a connection, list actions, run actions, or proxy requests. It does not instruct reading local system files, arbitrary environment variables, or exfiltrating data outside the Membrane/Ravelin flow. It does advise headless login flows and JSON input handling, which is appropriate for the described tasks.
Install Mechanism
There is no formal install spec, but the instructions require running an npm global install (@membranehq/cli). This is a reasonable dependency for a CLI-based integration but carries the usual npm-global risk (install-time scripts, executing third-party code). Using npx or auditing the package before global install reduces risk.
Credentials
The skill requests no environment variables or local credentials. It relies on the Membrane account/connection model for auth, which is proportional. Note: creating a connection grants Membrane (and the user-agent using it) the ability to act against the Ravelin API on the connected account—understand the permissions granted during OAuth.
Persistence & Privilege
always is false and the skill is user-invocable with normal autonomous invocation enabled. The skill does not request system-wide config changes or persistent elevated privileges.
Assessment
This skill is instruction-only and does what it says: it uses Membrane to talk to Ravelin. Before installing/using it, consider: 1) the instructions ask you to install @membranehq/cli globally (npm installs run third-party code); prefer npx or inspect the package if you have concerns. 2) You must create a Membrane account and complete a browser OAuth flow — doing so grants Membrane the ability to access your Ravelin data via the created connection, so review the connection's scopes and permissions. 3) If you don't trust Membrane, run equivalent API calls manually or review Membrane's docs/source. Overall the skill is coherent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk970nczqycw269wbyrxz42ff15842mb0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.