Thena
v1.0.2Thena integration. Manage data, records, and automate workflows. Use when the user wants to interact with Thena data.
⭐ 0· 94·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name/description (Thena integration) aligns with the instructions (use Membrane to connect to Thena). Minor mismatch: the registry metadata lists no required binaries, yet SKILL.md explicitly instructs installing the @membranehq/cli globally — the skill needs that CLI even though it's not declared in metadata.
Instruction Scope
Runtime instructions stay within the stated purpose: installing the Membrane CLI, logging in, creating/using a Thena connection, listing and running actions, and proxying requests via Membrane. The instructions do not ask to read unrelated system files or exfiltrate data to external endpoints other than Membrane/Thena.
Install Mechanism
This is an instruction-only skill with no automated install spec. It recommends installing a global npm package (npm install -g @membranehq/cli). Installing global npm packages is a common but non-trivial supply-chain risk; the skill does not provide a verified release URL or pinned version. Risk is moderate but expected for a CLI-driven integration.
Credentials
The skill declares no required environment variables and explicitly advises not to ask users for API keys, relying on Membrane to manage credentials server-side. This is coherent, but it means you must trust Membrane with access tokens/refresh handling for your Thena account — verify their access scope and privacy/security practices before granting connections.
Persistence & Privilege
always:false and default autonomous invocation are used (platform defaults). The skill does not request persistent platform-level privileges or modify other skills. Note: if the agent is allowed to invoke skills autonomously, it could perform actions via your Membrane-connected Thena account — that is normal but worth considering when enabling autonomous behavior.
Assessment
This skill appears to be what it says: a Thena integration that uses the Membrane CLI. Before installing/use: (1) verify you trust Membrane (review https://getmembrane.com and their docs and privacy/permissions), (2) inspect the npm package/version you install (avoid blindly installing unpinned or unknown packages globally), (3) be aware Membrane will hold/refresh your Thena credentials — confirm scopes and revoke options, and (4) if you allow autonomous agent invocation, understand the agent could act on your Thena data via the Membrane connection. If you want lower risk, run the CLI manually rather than granting broad autonomous agent permissions.Like a lobster shell, security has layers — review code before you run it.
latestvk974ced5m04q9ee7q8cfzgtg1x842b8f
License
MIT-0
Free to use, modify, and redistribute. No attribution required.