Vultr
v1.0.0Vultr integration. Manage data, records, and automate workflows. Use when the user wants to interact with Vultr data.
⭐ 0· 51·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to provide a Vultr integration and all runtime instructions use the Membrane CLI and Membrane connections to access Vultr. Requiring a Membrane account and CLI is consistent with that purpose. Minor mismatch: registry metadata declares no required binaries but the SKILL.md expects the Membrane CLI to be installed.
Instruction Scope
SKILL.md confines actions to installing and using the Membrane CLI (login, create connections, list/run actions, proxy requests). It does not instruct the agent to read unrelated local files or request unrelated environment variables or credentials. It explicitly tells users not to ask for Vultr API keys and to let Membrane handle auth.
Install Mechanism
There is no formal install spec in the registry; instead the README instructs users to run 'npm install -g @membranehq/cli' (or use npx). This is an expected way to obtain the CLI but involves fetching and installing third‑party code from npm (network download and code execution). Because the install is manual/instruction-only, there is no automated install baked into the skill package.
Credentials
The skill declares no environment variables or primary credential, and SKILL.md relies on Membrane to manage credentials server-side. It does not request unrelated secrets or multiple external credentials, so the requested environment access is proportionate.
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-wide changes in its instructions. Autonomous invocation is permitted (platform default) but there is no added privileged persistence. The skill does instruct installing a CLI tool, which will create local files, but that is within the expected scope.
Assessment
This skill appears to be what it says: a Membrane-driven Vultr integration. Before installing, verify you trust the Membrane provider and the @membranehq/cli npm package (review its npm/GitHub page and recent activity). Prefer running commands with npx for one-off use or inspect the package before doing a global install. Be aware that using the skill causes authentication via Membrane (browser-based login) and that Membrane will proxy requests to Vultr — so data passed through those requests will traverse Membrane's service. If you operate in a high-security environment, review Membrane's privacy/security docs and consider using an account with limited privileges or testing in an isolated environment. Also note the registry metadata omitted declaring the CLI dependency — that's a minor consistency issue but not intrinsically malicious.Like a lobster shell, security has layers — review code before you run it.
latestvk9724krcqz7dk27shxgyj5y3ws84cyyp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.