Small Improvements
v1.0.0Small Improvements integration. Manage data, records, and automate workflows. Use when the user wants to interact with Small Improvements data.
⭐ 0· 57·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description match the instructions. The skill's workflow is entirely built around the Membrane CLI and a Membrane account (used to proxy/auth to Small Improvements), which is a reasonable and expected dependency for a Small Improvements integration. No unrelated environment variables, binaries, or config paths are requested.
Instruction Scope
SKILL.md gives concrete CLI commands to install Membrane, log in, create/connect a Small Improvements connector, list/run actions, and proxy raw API requests. It does not instruct reading arbitrary local files, exfiltrating environment variables, or performing actions outside the stated integration scope. It explicitly advises not to ask users for API keys and to let Membrane handle auth.
Install Mechanism
The registry contains no automated install spec (instruction-only). The skill recommends installing @membranehq/cli via npm (-g). Installing a public npm CLI is a standard, traceable step, but it does modify the system global npm packages — users should verify the npm package and trust the Membrane publisher before installing.
Credentials
The skill declares no required environment variables and uses Membrane to manage credentials. That is proportionate: the skill does not ask for unrelated secrets or multiple external credentials.
Persistence & Privilege
always:false and no config-paths are requested. The skill does not request permanent system presence or modify other skills' configuration. Autonomous invocation is allowed (platform default) but not combined with other high-risk indicators.
Assessment
This skill appears to do what it says: it guides use of the Membrane CLI to talk to Small Improvements and does not ask for unrelated credentials. Before installing or running commands, verify you trust the Membrane service and the @membranehq/cli npm package (review the package repo, publisher, and permissions). Be aware that using Membrane means your proxied Small Improvements requests and data will flow through Membrane's service, so confirm that your organization’s privacy/security policy allows that. If you want to avoid installing a global npm package on a shared machine, run the CLI in a contained environment (container or per-project install). If you need a lower-privilege or offline workflow, request details from the skill author about alternative installation or minimal permission modes.Like a lobster shell, security has layers — review code before you run it.
latestvk973m595r69pszpp8149d68mth84a96m
License
MIT-0
Free to use, modify, and redistribute. No attribution required.