ClawHub

The Graph

v1.0.2

The Graph integration. Manage data, records, and automate workflows. Use when the user wants to interact with The Graph data.

⭐ 0· 43·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
medium confidence
ℹ
Purpose & Capability
The skill claims to integrate with The Graph and consistently instructs use of the Membrane CLI as a proxy — this matches the stated purpose. However, the registry metadata lists no required binaries even though SKILL.md assumes npm/node and the membrane CLI will be available, which is an omission.
✓
Instruction Scope
Instructions are focused on installing and using the Membrane CLI, creating connections, listing and running actions, and proxying requests to The Graph. They do not ask the agent to read unrelated files or exfiltrate local data; authentication is delegated to Membrane via browser flows.
ℹ
Install Mechanism
There is no platform-level install spec, but SKILL.md tells users to run `npm install -g @membranehq/cli` (or `npx` for discovery). Installing a global npm package is normal but requires trust in the @membranehq package and may require elevated privileges on the host.
✓
Credentials
The skill requests no environment variables or local config paths. It relies on Membrane for credential management (browser-based login), which is proportionate to the stated integration purpose.
✓
Persistence & Privilege
The skill is instruction-only, does not request always:true, and does not modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) but not combined with other high privileges.
Assessment
This skill is coherent: it uses the Membrane CLI as a proxy to The Graph and asks you to authenticate via browser. Before proceeding, verify you trust the @membranehq npm package and the getmembrane.com project (review the npm package owner and recent releases). Be aware that installing a global npm CLI requires Node/npm and may need elevated privileges — consider installing in a controlled or non-production environment first. Also note the skill's metadata doesn't list required binaries (npm/node/membrane) even though the instructions assume them; ensure those tools exist before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk977bmt8x3j87svqgjf81ne2vh843jr5

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments