Fastfield Mobile Forms
v1.0.2FastField Mobile Forms integration. Manage data, records, and automate workflows. Use when the user wants to interact with FastField Mobile Forms data.
⭐ 0· 106·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description state a FastField integration and the SKILL.md only instructs using the Membrane CLI and Membrane connectors for FastField — expected and proportionate. No unrelated services, env vars, or binaries are requested.
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, logging in (browser-based auth), discovering connectors/actions, running actions, and proxying requests through Membrane. The doc does not direct reading arbitrary files or exfiltrating unrelated data. Note: it instructs installing a global npm CLI and running commands that open a browser for auth (expected for this integration).
Install Mechanism
There is no automated install spec in the package (instruction-only). The SKILL.md tells the user to run `npm install -g @membranehq/cli` — this is a normal, traceable npm package install but is a system-level change initiated by the user. Installing third-party CLIs carries the usual supply-chain risk; the skill itself does not perform the install.
Credentials
The skill declares no required env vars or credentials and explicitly instructs not to ask users for API keys, relying on Membrane-managed connections. Requiring a Membrane account and network access is appropriate for the stated functionality.
Persistence & Privilege
always is false and the skill is user-invocable. The skill can be invoked autonomously by the agent (platform default), which is expected for integrations and not by itself a red flag in this context.
Assessment
This skill is coherent: it uses the Membrane CLI to mediate access to FastField and does not ask for unrelated secrets. Before installing or using it, verify you trust @membranehq/cli (review the npm package and its GitHub repo), be aware that `npm install -g` modifies your system PATH (consider installing in a sandbox/container if you prefer), and understand that granting a Membrane connection gives Membrane access to your FastField data for the connector's scope. If you allow autonomous agent invocation, remember the agent may run CLI commands via the Membrane CLI — only enable that if you trust the skill and the Membrane account it will use.Like a lobster shell, security has layers — review code before you run it.
latestvk977dqzjf76qdn1wxaadndqpch843x6h
License
MIT-0
Free to use, modify, and redistribute. No attribution required.