Softr
v1.0.2Softr integration. Manage Applications. Use when the user wants to interact with Softr data.
⭐ 0· 100·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill name/description (Softr integration) align with the instructions: all operations are performed via the Membrane CLI which proxies to Softr. The homepage and SKILL.md reference Membrane consistently, so the requested capabilities match the stated purpose.
Instruction Scope
SKILL.md instructs the agent/operator to install and run the Membrane CLI, perform browser-based login, list connections, run actions, and proxy raw API requests. These actions stay within the Softr integration scope, but they explicitly route data and authentication through Membrane (a third party). The instructions also recommend running global npm installs and opening browser flows, which change system state and involve external network communication.
Install Mechanism
There is no automated install spec in the manifest; the README directs users to run `npm install -g @membranehq/cli` or use npx. Installing a global npm CLI is a normal approach but requires network access and elevated permissions (may alter system state). The package comes from the public npm registry (moderate risk) rather than an arbitrary URL or extract; no obscure or shortener URLs are used.
Credentials
The skill declares no required env vars or secrets. Authentication is handled by Membrane via browser flows and connections; this is proportional to the task. Note: using Membrane means Softr credentials/tokens will be managed/stored by Membrane servers — a privacy/trust consideration rather than a technical mismatch.
Persistence & Privilege
The skill is not set to always:true and does not request system-wide configuration changes or other skills' credentials. Model invocation is enabled (default), which is normal for user-invocable skills.
Assessment
This skill delegates Softr access to the Membrane service and instructs you to install the Membrane CLI (npm global install). Before installing or using it, confirm you trust Membrane (review their docs/privacy policy and GitHub repo), understand that your Softr credentials will be proxied/stored by Membrane, and be aware that a global npm install modifies your system and may require admin rights. If you must keep credentials local, or cannot trust a third party to proxy requests, do not use this skill. Otherwise, the skill's instructions are consistent with its purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk97d4bnqbj1eqm6ns4wq0vgtmd842erz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.