Modeck

MoDeck integration. Manage data, records, and automate workflows. Use when the user wants to interact with MoDeck data.

This skill appears to be what it says: a Membrane/MoDeck CLI integration. Before installing: 1) Verify the @membranehq/cli package on npm and the linked GitHub repo to ensure they are official and trustworthy. 2) Be cautious installing global npm packages (they run code during install); consider using npx or a container/VM if you don't want global install. 3) Understand that the CLI login will create and store tokens on your machine and will have access to any connected accounts you authorize — only authorize accounts you intend to use. 4) Note the stray reference to Twitter docs in SKILL.md (likely a copy/paste error); it doesn't change functionality but is worth confirming with the maintainer if you need absolute clarity. If you can't verify the CLI package and repo, treat this as higher risk and avoid installing it system-wide.

Type: OpenClaw Skill Name: modeck Version: 1.0.1 The skill requires the agent to perform high-privilege operations, specifically a global NPM package installation (npm install -g @membranehq/cli) and CLI-based authentication (membrane login). While these actions are consistent with the stated purpose of integrating with the Membrane platform, they introduce significant supply chain risk and grant the agent broad execution capabilities. The instructions also encourage the agent to dynamically create and execute actions via a third-party service, which could lead to unauthorized remote code execution if the platform is compromised or misused.