Truv
v1.0.0Truv integration. Manage data, records, and automate workflows. Use when the user wants to interact with Truv data.
⭐ 0· 55·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions: the skill tells the agent to use the Membrane CLI to manage Truv connections, run actions, and proxy requests. No unrelated credentials, binaries, or system paths are requested.
Instruction Scope
SKILL.md stays on topic: it instructs installing/using the Membrane CLI, logging in, creating/listing connections, listing/running actions, and proxying requests to Truv. It does not ask the agent to read unrelated files or access unrelated environment variables. It does require opening a browser for Membrane login (expected for OAuth-style flows).
Install Mechanism
The skill is instruction-only (no install spec), but it tells users to install @membranehq/cli globally via npm (-g). That is a normal, expected step for CLI usage but has the usual risks of installing a global npm package: verify the package owner and integrity, or prefer npx to avoid global install. No arbitrary download URLs or extract operations are suggested.
Credentials
No environment variables, secrets, or config paths are requested. The SKILL.md explicitly recommends letting Membrane manage credentials server-side and not asking users for API keys, which is proportionate for this integration.
Persistence & Privilege
The skill does not request always:true or other elevated persistence. It is user-invocable and relies on the Membrane CLI and network access; nothing in the manifest indicates it will modify other skills or system-wide agent settings.
Assessment
This skill appears to do what it claims: it teaches using the Membrane CLI to talk to Truv. Before installing or running anything, verify you trust the Membrane project (@membranehq) on npm and the homepage (getmembrane.com). Installing a global npm package modifies your system PATH—consider using npx/@membranehq/cli@latest instead of npm -g if you prefer not to install globally. Be aware login opens a browser and establishes authentication between your account and Membrane; only proceed if you trust Membrane to manage Truv credentials. If you need higher assurance, review the @membranehq/cli package on the npm/GitHub repository and confirm maintainer identity and release history before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk97cmfyh5rjw6g7v5mveyfs2wn84cgav
License
MIT-0
Free to use, modify, and redistribute. No attribution required.