Trunarrative
v1.0.0TruNarrative integration. Manage data, records, and automate workflows. Use when the user wants to interact with TruNarrative data.
⭐ 0· 48·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with TruNarrative and exclusively documents using the Membrane CLI and Membrane connections to access TruNarrative. There are no unrelated environment variables, binaries, or install steps required by the skill itself — the described dependencies (Membrane CLI and a Membrane account) align with the stated purpose.
Instruction Scope
SKILL.md gives concrete CLI commands (installing @membranehq/cli, login flows, connection and action commands, and a proxy request command). The instructions do not ask the agent to read unrelated files, environment variables, or to exfiltrate data; they do require network and browser-based authentication, which is appropriate for this integration.
Install Mechanism
The skill is instruction-only and provides no automatic install spec. It instructs users to install the Membrane CLI from the public npm registry (npm install -g @membranehq/cli). That is a normal, traceable install mechanism for a CLI; since installation is left to the user (no archives or obscure URLs), install risk is limited but depends on whether you trust the npm package author.
Credentials
The skill declares no required env vars or credentials and explicitly advises not to ask users for API keys, instead using Membrane-managed connections. Requiring a Membrane account is proportional to the proxy-based design. Note that Membrane (the third party) will handle and thus have access to TruNarrative credentials and proxied request data.
Persistence & Privilege
The skill does not request permanent presence (always: false) or system-level configuration changes. It is user-invocable and allows normal autonomous invocation, which is the platform default and expected for an integration skill.
Assessment
This skill is coherent, but before installing/using it: 1) Verify you trust Membrane and the @membranehq/cli npm package (check the package publisher, download counts, and repository). 2) Understand that Membrane's service will hold or proxy your TruNarrative credentials and will see request/response data — review Membrane's privacy/security policies and access scopes. 3) Installing the CLI globally requires npm privileges; consider installing in a controlled environment or container if you prefer isolation. 4) When creating connections, review and revoke access tokens when no longer needed. If you need stronger guarantees (no third-party proxying), this skill's design (proxy via Membrane) may not meet that requirement.Like a lobster shell, security has layers — review code before you run it.
latestvk9701tz8tgjdnw76575241g1hd84d802
License
MIT-0
Free to use, modify, and redistribute. No attribution required.