Vectara
v1.0.0Vectara integration. Manage data, records, and automate workflows. Use when the user wants to interact with Vectara data.
⭐ 0· 25·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description claim a Vectara integration; the SKILL.md exclusively documents using the Membrane CLI to connect to Vectara, list actions, run actions, and proxy API requests. Required access and operations are consistent with a search/integration helper.
Instruction Scope
Runtime instructions only direct the agent to install and use the Membrane CLI, run Membrane commands (login, connect, action list/run, request). There are no instructions to read unrelated files, environment variables, or system secrets. Network usage and browser-based login flows are expected for this integration.
Install Mechanism
This is an instruction-only skill (no install spec). The SKILL.md recommends installing a third-party npm CLI globally (npm install -g @membranehq/cli). That is expected for a CLI-driven integration, but installing global npm packages has the usual supply-chain/privilege risks; the recommendation is reasonable but warrants verifying the package source and considering npx or a scoped install if you prefer less persistent changes.
Credentials
The skill declares no required environment variables or credentials and instructs using Membrane's connection flow and browser auth. It avoids asking for local API keys or secrets, which is appropriate because Membrane is described as managing credentials server-side.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent system-level presence or to modify other skills. The normal autonomous invocation flag is unchanged and not concerning by itself.
Assessment
This skill appears coherent: it uses the Membrane CLI to manage Vectara connections and run actions, and it doesn't ask for local secrets. Before installing or running it, verify the Membrane CLI package (@membranehq/cli) is the official one (check the npm page and repository), prefer using npx or a local install if you want to avoid a global npm install, and review the permissions and scope of your Membrane account (the CLI will open a browser for login and Membrane will hold credentials/proxy requests to Vectara). If you manage sensitive data, confirm how Membrane proxies or stores credentials and what data is sent to Membrane/Vectara.Like a lobster shell, security has layers — review code before you run it.
latestvk9715qfhakq0q9ghrf9yk3pbwn84670m
License
MIT-0
Free to use, modify, and redistribute. No attribution required.