ClawHub

Tolgee

v1.0.0

Tolgee integration. Manage data, records, and automate workflows. Use when the user wants to interact with Tolgee data.

⭐ 0· 55·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description say 'Tolgee integration' and the SKILL.md consistently uses the Membrane CLI to access Tolgee. Requiring network access and a Membrane account is coherent with the stated purpose.
✓
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, logging in, creating/listing Membrane connections, running pre-built actions, and proxying requests to the Tolgee API. The instructions do not ask the agent to read unrelated files or to collect secrets from the environment.
ℹ
Install Mechanism
The SKILL.md asks the user to install @membranehq/cli via npm -g. This is a standard package installation and expected for a CLI-based integration, but installing global npm packages runs third-party code on the host — verify you trust @membranehq/cli and the npm package before installing.
✓
Credentials
No environment variables, secrets, or config paths are required by the skill. Authentication is delegated to Membrane (browser-based login), which is proportionate to the task. The requirement of a Membrane account is justified by the design.
✓
Persistence & Privilege
The skill does not request always-on presence and uses normal autonomous invocation settings. It does not instruct modifying other skills or system-wide agent settings.
Scan Findings in Context
[NO_CODE_FILES] expected: The package is instruction-only (only SKILL.md present) so the regex-based scanner had no code to analyze. This is expected for an instruction-only CLI integration.
Assessment
This skill appears internally consistent: it uses the Membrane CLI to integrate with Tolgee and does not ask for local secrets. Before installing, verify you trust the @membranehq npm package (global installation runs code on your machine). Be mindful when using the 'membrane request' proxy: it will forward whatever path/body you provide to the Tolgee API, so avoid sending sensitive data unintentionally. If you don't want to install a global npm package, consider running the CLI via npx or in a contained environment.

Like a lobster shell, security has layers — review code before you run it.

latestvk973z5763997v25ke2g03dy1c984ahey

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments