Upbooks
v1.0.2UpBooks integration. Manage data, records, and automate workflows. Use when the user wants to interact with UpBooks data.
⭐ 0· 67·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description claim UpBooks integration and the SKILL.md consistently instructs using the Membrane CLI to connect to UpBooks, run actions, and proxy API requests — network access and a Membrane account are expected and proportional.
Instruction Scope
Runtime instructions focus on installing/using the Membrane CLI, creating connections, listing/running actions, and proxying requests. They do not instruct reading unrelated files, environment variables, or sending data to unexpected endpoints.
Install Mechanism
This is an instruction-only skill (no install spec). It recommends installing @membranehq/cli via npm -g or using npx. That is reasonable for the described workflow, but global npm installs run third-party code on the host; using npx or auditing the package is safer.
Credentials
The skill declares no required environment variables or credentials. It explicitly directs using Membrane-managed connections (browser OAuth) rather than asking for API keys, which is proportionate to its purpose.
Persistence & Privilege
No elevated privileges requested. always is false, the skill does not require modifying other skills or system-wide settings, and autonomous invocation is default but not combined with other red flags.
Assessment
This skill appears coherent: it uses the Membrane CLI to talk to UpBooks and only needs a Membrane account and network access. Before installing, verify the @membranehq/cli package (npm page, GitHub repo) and prefer running with npx to avoid a global install. Review the OAuth scopes shown during membrane login and only grant the minimum access needed; if you don't trust Membrane or the package, do not install.Like a lobster shell, security has layers — review code before you run it.
latestvk9705nvcwbn9fzc4zts0f41q4x842hrj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
