Validis
v1.0.0Validis integration. Manage data, records, and automate workflows. Use when the user wants to interact with Validis data.
⭐ 0· 51·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Validis integration) match the instructions: the skill tells the agent to use the Membrane CLI to discover connections, run actions, and proxy requests to Validis. No unrelated services, credentials, or system resources are requested.
Instruction Scope
Instructions are limited to installing/using the Membrane CLI, performing login via browser, listing/connecting to connectors, running actions, and proxying requests to Validis through Membrane. The proxy can send arbitrary HTTP requests to Validis endpoints via the connection — expected for this purpose but worth noting because Membrane will see proxied request/response data.
Install Mechanism
No packaged install spec is included; the doc instructs installing a public npm CLI (npm install -g @membranehq/cli). This is typical for CLI-based integrations but carries the normal risk of installing third‑party npm globals. No downloads from unknown hosts or archive extraction are present.
Credentials
The skill declares no required environment variables, no config paths, and no credentials. It explicitly tells users not to paste API keys and to create connections via Membrane instead. Requested access is proportional to the stated purpose.
Persistence & Privilege
always is false and there are no install-time hooks or instructions to modify other skills or system-wide agent settings. Autonomous invocation remains allowed (platform default) but that is not combined with elevated privileges in this skill.
Assessment
This skill is internally consistent and uses Membrane to handle auth and API calls. Before installing: 1) Review the @membranehq/cli package source/release and publisher to ensure you trust it (global npm installs run code on your machine). Consider using npx to avoid a persistent global install. 2) Understand that Membrane (the service) will proxy and see requests/responses for Validis data — only use with accounts/services you trust. 3) Confirm you are comfortable with the CLI's browser-based login flow and the permissions granted to the connection. If you need stricter isolation, test in a sandboxed environment or create a limited-purpose account for integrations.Like a lobster shell, security has layers — review code before you run it.
latestvk9724hwbkt3wqbfxhbmzjrppnd84cptd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.