Filebase
v1.0.0Filebase integration. Manage data, records, and automate workflows. Use when the user wants to interact with Filebase data.
⭐ 0· 13·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The SKILL.md describes interacting with Filebase via the Membrane CLI and does not request unrelated credentials or system access. The skill's stated purpose (Filebase integration) matches the instructions to create Membrane connections and run actions or proxied requests.
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, logging in, managing connections, listing and running actions, and proxying requests through Membrane. The doc does not instruct reading arbitrary local files or other unrelated system state, nor does it request local secrets.
Install Mechanism
There is no registry install spec (instruction-only), which is low-risk. The SKILL.md asks the user to install @membranehq/cli globally via npm — a standard but supply-chain-sensitive step. Users should verify the CLI package and trust in Membrane before installing global npm packages.
Credentials
The skill declares no required environment variables or credentials and explicitly advises against asking the user for API keys. It relies on a Membrane account (hosted service) for auth, which is proportionate, but note that traffic and credentials are handled server-side by Membrane.
Persistence & Privilege
The skill does not request always:true, no config paths, and is instruction-only. It does not require modifying other skills or system-wide agent settings. Normal autonomous invocation is allowed but not explicitly privileged by the skill.
Assessment
This skill is an instruction-only wrapper that expects you to use the Membrane CLI to connect to Filebase. Before installing or using it: (1) verify you trust Membrane (check their homepage/repo and CLI package on npm) because the CLI will run on your machine; (2) understand that Membrane acts as a proxy and will see request payloads and handle credentials server-side — avoid sending sensitive secrets through it unless you trust the service; (3) installing a global npm package can be a supply-chain vector, so prefer installing in a controlled environment or inspecting the package source first; (4) no local environment variables are required by the skill itself. If any of these concerns are unacceptable, don't proceed or ask for an alternative that calls Filebase directly with explicit, auditable credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk9723bp9crwyx736q8n8qyhr3h848r1p
License
MIT-0
Free to use, modify, and redistribute. No attribution required.