You Can Book Me
v1.0.0You Can Book Me integration. Manage data, records, and automate workflows. Use when the user wants to interact with You Can Book Me data.
⭐ 0· 70·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions: the SKILL.md consistently describes using the Membrane CLI to interact with You Can Book Me. The required capabilities (network access, a Membrane account, and the Membrane CLI) are appropriate for the claimed purpose.
Instruction Scope
Runtime instructions stay within scope: they instruct installing and using the Membrane CLI, creating a connection, listing actions, running actions, and proxying requests via Membrane. They do not instruct reading unrelated system files or environment variables. Note: proxying requests through Membrane means request and response data will flow through Membrane's servers (privacy/attestations matter).
Install Mechanism
No formal install spec in registry (instruction-only), but SKILL.md tells users to run `npm install -g @membranehq/cli` (and uses `npx` in examples). Installing an npm package globally runs third-party code on the host — a standard but moderately risky action compared to instruction-only skills. The package is from the public npm namespace @membranehq, which is expected for this integration; verify package provenance before installing.
Credentials
The skill declares no required env vars, no credentials, and no config paths. It explicitly delegates auth to Membrane (telling users not to provide API keys). This is proportionate to the stated purpose.
Persistence & Privilege
The skill is not always:true and is user-invocable. It does not request persistent system-wide privileges or attempt to modify other skills' configs. Autonomous invocation (default) is allowed but not combined with other concerning privileges.
Assessment
This skill is an instruction-only integration that tells the agent to use the Membrane CLI to manage You Can Book Me data. Before installing/using it: 1) Verify the @membranehq/cli package and the Membrane service (website, npm publisher, GitHub repo) so you trust the third party that will mediate API calls. 2) Understand that proxying via Membrane means booking data and API requests/responses transit Membrane's servers — if you need full data locality or different privacy guarantees, consider using the official You Can Book Me API directly or reviewing Membrane's privacy/security docs. 3) Prefer using npx (ephemeral execution) if you want to avoid a global npm install, and run installs in a controlled environment. 4) If you need higher assurance, request the skill author provide a reproducible install spec or link to the exact npm package and repository commit used.Like a lobster shell, security has layers — review code before you run it.
latestvk97cn9vyjyh924c5bd90ae055n845sfd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.