Retrium
v1.0.0Retrium integration. Manage data, records, and automate workflows. Use when the user wants to interact with Retrium data.
⭐ 0· 59·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill name and description (Retrium integration) align with the instructions: it tells the agent to use the Membrane CLI to connect to Retrium, list actions, proxy requests, and run actions. No unrelated services, binaries, or environment variables are requested.
Instruction Scope
SKILL.md confines runtime behavior to installing/using the Membrane CLI, running membrane commands (login, connect, action list/run, request). It does not instruct the agent to read arbitrary system files, collect unrelated secrets, or post data to off‑platform endpoints. The instructions do rely on interactive/browser-based login or headless flow tokens produced by the Membrane CLI, which is consistent with delegated auth.
Install Mechanism
There is no formal install spec in the skill metadata, but the SKILL.md tells users to install @membranehq/cli via 'npm install -g' and also demonstrates 'npx ...'. Installing an npm package globally writes code to disk and requires appropriate privileges; this is expected for a CLI integration but is a moderate-risk action in general. Recommend verifying the npm package (publisher, package page, hashes) before global installation.
Credentials
The skill does not request environment variables, secret keys, or config paths. Authentication is delegated to Membrane's login flow (browser/headless). That is proportionate to the stated purpose; the skill explicitly warns not to ask users for API keys or tokens.
Persistence & Privilege
The skill does not require always:true or any special persistent presence. It is user-invocable and allows normal autonomous invocation, which is platform default and appropriate for this integration. The skill does not instruct modifying other skills or global agent settings.
Assessment
This skill is coherent: it uses the Membrane CLI to access Retrium and does not ask for unrelated credentials. Before using it, verify the @membranehq/cli npm package is legitimate (check npm page, GitHub repo, publisher), and be aware that installing a global npm package writes code to your system. You will need a Membrane account and will authenticate via a browser-based flow (or headless flow). Also confirm you trust Membrane as a proxy for your Retrium data, since 'membrane request' will forward API calls through their service.Like a lobster shell, security has layers — review code before you run it.
latestvk973a256az30bvvyxxkzfhvq5984b961
License
MIT-0
Free to use, modify, and redistribute. No attribution required.