Truss
v1.0.0Truss integration. Manage data, records, and automate workflows. Use when the user wants to interact with Truss data.
⭐ 0· 56·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The description (Truss integration) matches the instructions: discover connectors, create a connection, run actions, and proxy API requests via the Membrane CLI. The requirement for a Membrane account and network access is expected given this design.
Instruction Scope
SKILL.md contains only operational instructions for installing and using the Membrane CLI, logging in via browser, creating connections, listing actions, running actions, and proxying requests. It does not instruct reading unrelated system files, accessing other credentials, or exfiltrating data outside of Membrane/Truss; proxying requests through Membrane is explicitly documented and consistent with the skill's purpose.
Install Mechanism
There is no formal install spec in the registry metadata, but SKILL.md tells users to run `npm install -g @membranehq/cli` (or use npx). Installing a public npm CLI is a common and expected step, but it does require npm/node on the host and writes a global binary. This is moderate-risk only because it executes third-party code; the package name is scoped (@membranehq) and no arbitrary URL downloads are recommended.
Credentials
The skill declares no required environment variables or credentials and explicitly instructs not to ask users for API keys, relying on Membrane to manage auth. That is proportional to the described functionality. Users should note that auth is handled server-side by Membrane (so trust in Membrane is required).
Persistence & Privilege
The skill does not request permanent/always-on presence and uses normal, user-invoked CLI flows. It does not ask to modify other skills or system-wide settings.
Assessment
This skill is coherent and appears to do what it says: use the Membrane CLI to connect and proxy requests to Truss. Before installing, verify you trust the Membrane project and the @membranehq npm package (check the npm page and homepage links). Note the SKILL.md instructs a global npm install, which requires npm/node and will add a binary to your system — use `npx` if you prefer not to install globally. Understand that authentication is handled server-side by Membrane (they will hold and refresh credentials for connections), so avoid using this skill if you need to keep all credentials strictly local. If you require stronger assurance, inspect the @membranehq/cli package source on its repository and confirm the connector IDs and endpoints you use point to the expected Truss endpoints.Like a lobster shell, security has layers — review code before you run it.
latestvk97ertfdwqfj3w6ky71605y4bd84dcdt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.