Tenderly
v1.0.0Tenderly integration. Manage data, records, and automate workflows. Use when the user wants to interact with Tenderly data.
⭐ 0· 52·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The name/description promise a Tenderly integration and the SKILL.md consistently describes using Membrane (a third-party integration layer) to access Tenderly. The required capabilities (network access and a Membrane account) match the described workflow; there are no unrelated environment variables or binaries requested.
Instruction Scope
Instructions are limited to installing/using the Membrane CLI, logging in, creating a Tenderly connection, listing and running actions, and optionally proxying raw API requests through Membrane. There are no steps that ask the agent to read unrelated files, harvest environment variables, or send data to unexpected endpoints. Note: proxying arbitrary API calls via 'membrane request' means Membrane (the service) will see request/response data for any proxied Tenderly calls.
Install Mechanism
This is an instruction-only skill but it tells the user to run 'npm install -g @membranehq/cli' (or use npx). Installing/updating a global npm package executes external code and pulls from the npm registry, which is expected for this integration but carries the usual supply-chain risk. Using npx or verifying the package/maintainer on npm/GitHub reduces risk.
Credentials
The skill declares no required env vars or credentials and explicitly advises letting Membrane manage auth. That is proportionate to the stated purpose. There are no unrelated credential requests.
Persistence & Privilege
The skill is not always-enabled and is user-invocable. It does not request system config changes or elevated privileges. The skill can be invoked autonomously by the agent (platform default), which is normal; consider that autonomous runs will be able to call the Membrane CLI if installed.
Assessment
This skill appears coherent and limited to using the Membrane CLI to talk to Tenderly. Before installing: verify and trust the @membranehq/cli package (check the npm org and GitHub repo), prefer using npx to avoid a global install if you want to limit changes to your system, and be aware that Membrane will proxy API requests and therefore will see any Tenderly data you access through it. If you are sensitive about third-party access to blockchain data or secrets, review the permissions granted when creating the connection and avoid running these steps in high-risk or production-sensitive environments without review.Like a lobster shell, security has layers — review code before you run it.
latestvk971tv73h5bf8sd2c2tkmh74kd84dnmq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.