Robocorp
v1.0.2Robocorp integration. Manage Organizations. Use when the user wants to interact with Robocorp data.
⭐ 0· 140·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is described as a Robocorp integration and all instructions revolve around using the Membrane CLI to discover connectors, create connections, run actions, or proxy requests to the Robocorp API. Requiring a Membrane account and network access is consistent with that purpose.
Instruction Scope
The SKILL.md stays on-task: it only instructs use of the Membrane CLI and its request/action APIs. Important privacy/security note: the instructions explicitly send Robocorp requests through Membrane's proxy, which means request/response payloads and Robocorp credentials (managed server-side by Membrane) will transit and be stored/handled by Membrane. That is expected behavior for this integration but is material to risk/privacy.
Install Mechanism
There is no automatic install spec in the registry (instruction-only), but the README tells the user to run `npm install -g @membranehq/cli` or use `npx ...`. Installing or running packages from npm executes third-party code (supply-chain risk). This is common for CLI workflows but worth noting; the skill itself does not embed or auto-download code.
Credentials
The skill requests no environment variables or local credentials. It relies on Membrane to manage authentication server-side, which is proportionate to its purpose. Users should be aware that credentials and API traffic will be held/processed by Membrane rather than kept local.
Persistence & Privilege
The skill does not request 'always: true', does not require system-level config paths, and is user-invocable only. There is no instruction to modify other skills or system-wide settings. Autonomous invocation is enabled by default but not combined with other concerning privileges.
Assessment
This skill appears to do what it says: it teaches the agent to use the Membrane CLI to talk to Robocorp. Before installing or using it: (1) understand that using the skill routes API requests and credentials through Membrane — review Membrane's privacy/security policies and ensure you trust that third party; (2) be cautious installing global npm packages (supply-chain risk); prefer using `npx` or pinning a verified package version and verify the @membranehq publisher; (3) if you cannot or do not want a third party to see your Robocorp data/credentials, consider using a direct Robocorp integration instead. If you want deeper assurance, verify the Membrane CLI's source repository and releases on GitHub (publisher, release checksums) before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk976h41t2h3ngrn5s1v5kk6mrd842qz5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.