Wuf
v1.0.2Wuf integration. Manage data, records, and automate workflows. Use when the user wants to interact with Wuf data.
⭐ 0· 88·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill name/description say 'Wuf integration' and the SKILL.md consistently instructs using the Membrane CLI to connect to Wuf, discover actions, run actions, and proxy API requests. Requested capabilities align with the stated purpose.
Instruction Scope
All runtime instructions are limited to installing/using the Membrane CLI, performing a browser-based login, creating/listing connections, running actions, and proxying requests through Membrane. Note: proxying sends request payloads through Membrane's service, so user data will transit a third party; the instructions also assume the agent can run shell commands and open a browser or provide a login code.
Install Mechanism
There is no formal install spec in registry metadata, but SKILL.md directs installing @membranehq/cli globally via npm (or using npx). Installing a third‑party global npm package is a moderate-risk operation — the package is from the public npm registry (expected), but the skill does not declare this requirement in the metadata.
Credentials
The skill declares no environment variables or credentials and relies on Membrane to handle auth via browser-based login and server-side credential management. This is proportionate to the stated purpose. Be aware that using Membrane means credentials and proxied requests are managed by that service rather than local secrets.
Persistence & Privilege
The skill is not always-enabled and does not request elevated persistence or modify other skills. Autonomous invocation is permitted (platform default) but not combined with other high-risk indicators.
Assessment
This skill is instruction-only and coherent for interacting with Wuf via Membrane, but review and accept these trade-offs before installing: 1) It asks you to install a third‑party CLI (@membranehq/cli) globally — verify the package and publisher on npm and GitHub. 2) Authentication and proxied API calls go through Membrane's service (getmembrane.com), so data and credentials for Wuf connections will be handled by that provider — ensure you trust them and their privacy/security posture. 3) The SKILL.md expects the ability to run shell commands and open a browser (or perform headless auth flow). 4) The registry metadata doesn't list the CLI as a required binary or include an install spec — this is an implementation detail but worth noting. If you need stronger assurance, ask the skill author for the package checksum/release link, or prefer manual installation and inspection of the Membrane CLI before use.Like a lobster shell, security has layers — review code before you run it.
latestvk9718z4a8percjkpenqz2enxk18427yh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.