Edgedb
v1.0.0EdgeDB integration. Manage data, records, and automate workflows. Use when the user wants to interact with EdgeDB data.
⭐ 0· 63·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (EdgeDB integration) match the instructions: the skill advocates using the Membrane CLI to discover actions, run queries, and proxy requests to EdgeDB. Required capabilities (network access, a Membrane account) are consistent with that purpose.
Instruction Scope
SKILL.md confines itself to installing/using the Membrane CLI, logging in, creating connections, listing and running actions, and proxying HTTP requests to EdgeDB via Membrane. It does not instruct the agent to read unrelated files, environment variables, or system paths. Note: proxying arbitrary endpoints via Membrane inherently allows access to database data — that is expected for a DB integration but is a privacy/data-risk to consider.
Install Mechanism
There is no automated install spec in the manifest; the instructions recommend installing @membranehq/cli via npm -g. Installing a global npm package executes third‑party code and requires elevated rights on some systems. The suggested source (@membranehq on npm) is a standard registry install rather than an untrusted URL, but users should verify the package and publisher before installing.
Credentials
The skill declares no required environment variables or secrets. Authentication is handled via Membrane's login flow (browser-based or headless flow), which is proportional to the stated functionality. The SKILL.md explicitly advises not to ask users for API keys, which aligns with centralizing credential management in Membrane.
Persistence & Privilege
The skill is not always-enabled and does not request persistent/privileged platform presence or modify other skills' configurations. It relies on the agent invoking Membrane CLI when needed; autonomous invocation is allowed by default but is not coupled with elevated privileges here.
Assessment
This skill looks coherent for interacting with EdgeDB through the Membrane platform. Before installing or using it: 1) verify you trust the Membrane project and the @membranehq npm package (global npm installs run third‑party code); 2) prefer testing against a non-production EdgeDB instance or a least-privileged DB user because the proxy can access any endpoints you allow; 3) confirm you are comfortable with authentication via Membrane (it centralizes credentials server-side); and 4) only grant the agent permission to run commands if you trust the skill owner and the Membrane tooling.Like a lobster shell, security has layers — review code before you run it.
latestvk97atcnc1dpnzkde5xjj5hm2z184am62
License
MIT-0
Free to use, modify, and redistribute. No attribution required.