Transform
v1.0.0TransForm integration. Manage data, records, and automate workflows. Use when the user wants to interact with TransForm data.
⭐ 0· 52·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The name/description promise a TransForm integration and the runtime instructions require the Membrane CLI and a Membrane account to connect to TransForm. Asking the user to install and use a connector/proxy CLI is coherent with the stated purpose.
Instruction Scope
SKILL.md is a set of CLI usage instructions: install @membranehq/cli, run membrane login, create/connect a connector, list and run actions, or proxy requests through membrane. The instructions do not ask the agent to read unrelated local files, harvest environment variables, or contact unexpected endpoints. Note: the proxy capability lets the user (or agent) issue arbitrary API calls to TransForm via Membrane, which is expected for a connector but is powerful — review any proxied requests before running them.
Install Mechanism
There is no registry install spec, but the SKILL.md instructs users to install the Membrane CLI via npm (npm install -g @membranehq/cli) and optionally use npx. Installing a global npm package is a common but nontrivial action (writes to disk, executes network downloads). This is proportionate to the skill's purpose but carries the usual supply-chain considerations (verify package publisher and version).
Credentials
The skill declares no required environment variables or credentials and instead depends on interactive Membrane authentication (browser-based login) to obtain and refresh credentials. That approach is proportionate to connecting to a third-party API via a CLI/proxy.
Persistence & Privilege
always is false and the skill is instruction-only; it does not request persistent inclusion or elevated agent-wide privileges. Installing the CLI is a normal local setup step and does not imply the skill modifies other skills or system-wide configs beyond the usual npm install behavior.
Assessment
This skill is instruction-only and coherent: it tells you to install the official Membrane CLI and use it to connect to TransForm. Before installing or running anything: 1) verify the @membranehq npm package and its publisher (check the npm page and GitHub repo) to reduce supply-chain risk; 2) prefer using npx with an explicit version for one-off runs if you don't want a global install; 3) be aware that Membrane handles auth and will obtain credentials in your browser — review and approve any OAuth scopes during login; 4) the 'membrane request' proxy can issue arbitrary API calls on your behalf, so only run proxy commands you trust and avoid pasting unreviewed request strings; and 5) confirm the domains (getmembrane.com, transform.co) are the intended endpoints for your environment before granting access.Like a lobster shell, security has layers — review code before you run it.
latestvk97d3mpw32nev53mf5sje895nd84fecv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.