Tecalliance

TecAlliance integration. Manage data, records, and automate workflows. Use when the user wants to interact with TecAlliance data.

This skill appears coherent: it only tells the agent to use the Membrane CLI to connect to TecAlliance. Before installing/using it, verify you trust the Membrane project (homepage and GitHub repo), since the instructions suggest a global npm install (npm packages run code on install). Confirm your organization’s policy for installing global CLIs and inspect the @membranehq/cli repository if you need higher assurance. Note the skill uses network access and a Membrane account; it does not request direct API keys or other unrelated credentials. Autonomous invocation is allowed by default (normal), so consider whether you want the agent to call this skill without explicit user approval in your environment.

Type: OpenClaw Skill Name: tecalliance Version: 1.0.1 The skill instructions in SKILL.md direct the agent to perform high-risk system operations, including a global NPM installation (@membranehq/cli) and shell command execution for authentication and API interaction. While these capabilities are aligned with the stated purpose of integrating TecAlliance automotive data via the Membrane platform (getmembrane.com), the requirement for system-level modifications and the ability to dynamically generate and execute remote actions constitute a significant attack surface. Per the provided criteria, risky capabilities like shell and network access that are plausibly needed for the stated purpose should be classified as suspicious rather than benign.