Simplesat
v1.0.2Simplesat integration. Manage Surveys, Users, Teams, Integrations. Use when the user wants to interact with Simplesat data.
⭐ 0· 117·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description state a Simplesat integration and the SKILL.md exclusively documents using the Membrane CLI to connect/query Simplesat. No unrelated credentials, binaries, or capabilities are requested.
Instruction Scope
All runtime instructions are limited to installing/using the Membrane CLI, authenticating via browser, listing/connecting actions, and proxying requests through Membrane. This is consistent with the stated purpose, but be aware that API requests and any Simplesat data will be proxied through Membrane's service (i.e., data leaves the local machine and is handled server-side).
Install Mechanism
There is no packaged install spec in the skill bundle (instruction-only). The SKILL.md directs users to run `npm install -g @membranehq/cli` (or use npx). Installing a global npm CLI is a standard but privileged local change — it modifies system-wide npm state and should be done only from trusted sources.
Credentials
The skill declares no required environment variables or credentials and explicitly advises relying on Membrane to manage auth. The lack of extra env vars is appropriate for this connector-style skill.
Persistence & Privilege
The skill is not always-enabled and does not request special persistent privileges. It is instruction-only and does not modify other skills or system-wide agent settings.
Assessment
This skill is coherent: it simply instructs the agent to use the Membrane CLI to manage Simplesat data. Before installing, confirm you trust Membrane (https://getmembrane.com) because API calls and credentials are proxied through their service and may be handled/stored server-side. Installing the CLI requires `npm install -g` (or npx) which changes your system's npm/global binaries—only run that from trusted sources. For headless or automated use, be careful with printed URLs or codes (they can be leaked in logs). If you need direct control of Simplesat credentials or want to avoid an external proxy, consider using Simplesat's official API directly instead.Like a lobster shell, security has layers — review code before you run it.
latestvk974pqecsrmvqvp4scw3npts69843x26
License
MIT-0
Free to use, modify, and redistribute. No attribution required.