Realm
v1.0.0Realm integration. Manage data, records, and automate workflows. Use when the user wants to interact with Realm data.
⭐ 0· 86·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with Realm and all runtime instructions are about installing and using the Membrane CLI to access Realm. There are no unrelated environment variables, binaries, or config paths requested that would be out of scope for a Realm integration.
Instruction Scope
SKILL.md directs the agent to install and use the Membrane CLI, run connector discovery, connect via browser-based authentication, list actions, run actions, or proxy API requests through Membrane. It does not instruct reading arbitrary local files, exfiltrating environment variables, or contacting unexpected endpoints outside Membrane and Realm.
Install Mechanism
The skill is instruction-only (no install spec), but advises the user to run `npm install -g @membranehq/cli` or use `npx`. Installing a global npm package is a normal step for CLI usage but carries the usual trust risks (postinstall scripts, supply-chain risk). Prefer `npx` or review the package on npm/GitHub before global installation.
Credentials
No environment variables, credentials, or config paths are declared or required. Authentication is handled by Membrane via browser flows, which is consistent with the stated behavior. Note that granting Membrane account access necessarily gives the service access to your Realm data (expected for this integration).
Persistence & Privilege
The skill does not request persistent or elevated platform privileges (always is false). It does not modify other skills or system-wide agent settings according to the provided instructions.
Assessment
This skill is coherent with its stated purpose: it uses the Membrane CLI to connect to Realm and does not ask for unrelated secrets. Before installing: (1) Verify the @membranehq/cli package and the repository (https://github.com/membranedev/application-skills) on npm/GitHub to ensure authenticity; (2) prefer running commands with `npx` or a local install instead of `npm install -g` to reduce supply-chain risk; (3) understand that Membrane will mediate access to your Realm data — review their privacy/security docs and the scopes/permissions presented during the browser login; (4) in headless or shared environments, be cautious when copying authentication URLs/codes. If you see any instructions that ask for unrelated API keys, filesystem access, or environment variables not documented in SKILL.md, treat that as a red flag and reconsider installing.Like a lobster shell, security has layers — review code before you run it.
latestvk97bmt6ycrq303grsy87b82x2184gjvt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.