← Back to Skills Marketplace
Yugabyte
by
Membrane Dev
· GitHub ↗
· v1.0.1
· MIT-0
168
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install yugabyte
Description
Yugabyte integration. Manage data, records, and automate workflows. Use when the user wants to interact with Yugabyte data.
Usage Guidance
Before installing or using this skill: (1) Understand that SKILL.md instructs you to install the Membrane CLI via `npm install -g`, which will download and install code from the npm registry and place binaries on your system — ensure you trust @membranehq and verify package provenance. (2) The registry metadata omits required binaries (Node/npm) and the install step; plan for Node/npm availability or use `npx` to avoid a global install. (3) The skill uses browser-based auth (or a code you must paste back); don't paste secrets into chat — follow the documented login flow. (4) If you need stronger assurance, ask the publisher for an explicit install spec (or a link to the exact npm package release), and verify the repository/homepage match the package on npm. (5) Because this is instruction-only (no code shipped in the skill itself), the largest runtime risk is the CLI you install — review that project separately before installing.
Capability Analysis
Type: OpenClaw Skill
Name: yugabyte
Version: 1.0.1
The skill provides instructions for an AI agent to manage YugabyteDB instances using the Membrane CLI (@membranehq/cli). The instructions cover standard CLI operations including installation, authentication, and action execution via the Membrane platform. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the skill actually encourages secure credential management by offloading authentication to the Membrane service.
Capability Assessment
Purpose & Capability
The SKILL.md describes interacting with Yugabyte via the Membrane platform, which fits the skill name and description. However, the skill metadata lists no required binaries or install steps while the runtime instructions explicitly require npm/node (for npm install -g and npx). That mismatch (not declaring Node/npm) is an incoherence: a user installing this skill would need Node/npm but the registry doesn't advertise that requirement.
Instruction Scope
Instructions stay on-purpose: they direct the agent/user to install the Membrane CLI, log in via Membrane, create a connection for the Yugabyte connector, discover or create actions, and run them. The instructions do not ask the agent to read unrelated files, export environment secrets, or call unexpected external endpoints beyond Membrane. Authentication flow is browser-based or code-based (user-involved).
Install Mechanism
There is no formal install spec in the registry, but SKILL.md tells users to run `npm install -g @membranehq/cli@latest` (and suggests npx in other examples). That means arbitrary code will be downloaded from npm and installed globally. While @membranehq appears to be the intended publisher, a global npm install changes system state and has a higher trust/risk profile than an instruction-only skill that requires no installs. The registry should have declared this dependency and made provenance explicit.
Credentials
The skill does not request environment variables, credentials, or system config paths in metadata. The SKILL.md explicitly delegates credential management to Membrane and advises against asking users for API keys. The requirement for a Membrane account and network access is proportionate to the stated purpose.
Persistence & Privilege
The skill itself does not request 'always' nor system privileges, but following its instructions results in a global npm package installation that places binaries on PATH (persistence on the host). This side-effect is not declared in metadata and requires user consent; it's not inherently malicious but is an elevation of footprint compared to a truly instruction-only skill.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install yugabyte - After installation, invoke the skill by name or use
/yugabyte - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Auto sync from membranedev/application-skills
v1.0.0
Auto sync from membranedev/application-skills
Metadata
Frequently Asked Questions
What is Yugabyte?
Yugabyte integration. Manage data, records, and automate workflows. Use when the user wants to interact with Yugabyte data. It is an AI Agent Skill for Claude Code / OpenClaw, with 168 downloads so far.
How do I install Yugabyte?
Run "/install yugabyte" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Yugabyte free?
Yes, Yugabyte is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Yugabyte support?
Yugabyte is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Yugabyte?
It is built and maintained by Membrane Dev (@membranedev); the current version is v1.0.1.
More Skills