← Back to Skills Marketplace
Tiendanube
by
Vlad Ursul
· GitHub ↗
· v1.0.0
· MIT-0
80
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install tiendanube
Description
Tiendanube (Nuvemshop) integration. Manage Recordses. Use when the user wants to interact with Tiendanube (Nuvemshop) data.
Usage Guidance
This skill appears to be a wrapper around the Membrane CLI to manage Tiendanube (Nuvemshop) data and does not itself contain code, but there are a few things to check before installing:
- Metadata mismatch: The skill metadata lists no required binaries or credentials, yet the instructions require Node/npm (or npx) and a valid Membrane account. Expect to need Node/npm and to authenticate to Membrane.
- CLI install: The SKILL.md recommends npm install -g @membranehq/cli. Prefer running it with npx (npx @membranehq/cli ...) if you want to avoid a global install, or inspect the package on the npm registry/GitHub first.
- Third-party service: Using this skill routes your Tiendanube access through Membrane’s service. Verify you trust Membrane (privacy, data handling, and account permissions) before connecting production data.
- Source unknown: Registry lists Source: unknown and homepage getmembrane.com; verify the package/repository links (e.g., GitHub repo) and confirm the publisher before granting access.
If you want this skill, ask the publisher to update metadata to declare required binaries (node/npm), that a Membrane account is required, and to supply authoritative repository links. If you cannot verify Membrane or the npm package publisher, do not install the CLI or connect production accounts.
Capability Analysis
Type: OpenClaw Skill
Name: tiendanube
Version: 1.0.0
The skill is a standard integration for Tiendanube (Nuvemshop) using the Membrane CLI. The instructions in SKILL.md guide the agent to install the legitimate '@membranehq/cli' package and use it for authentication and data management. There is no evidence of data exfiltration, malicious execution, or harmful prompt injection; the skill actually promotes security best practices by advising the agent to let the platform handle credentials rather than requesting API keys from the user.
Capability Assessment
Purpose & Capability
The SKILL.md describes exactly the intended capability (manage Tiendanube records) and delegates work to the Membrane CLI, which is coherent with the skill name/description. However, the registry metadata lists no required binaries or credentials while the instructions require a Membrane account and npm/node for installing the CLI — a mismatch between declared requirements and runtime instructions.
Instruction Scope
The runtime instructions are narrowly scoped to installing/using the Membrane CLI, creating connections, discovering and running actions, and performing auth via Membrane. They do not instruct reading arbitrary local files or exporting unrelated system credentials. Headless login requires a user to copy a code from a browser, which is expected for OAuth-like flows.
Install Mechanism
There is no install spec in the registry (instruction-only), but SKILL.md tells the user to run npm install -g @membranehq/cli or use npx. Installing a global npm package is common but does require write access and a trusted package source. The instructions reference the official @membranehq/cli package (a scoped npm name), which is better than a random URL, but the registry metadata did not declare Node/npm as a required binary.
Credentials
The skill metadata declares no required env vars or primary credential, yet SKILL.md states a valid Membrane account is required and instructs the user to run membrane login. That account/credential requirement should be declared. The SKILL.md explicitly says not to ask users for direct API keys (good), but the omission in metadata increases risk of user confusion and accidental credential exposure.
Persistence & Privilege
The skill is not always-on, does not request elevated platform privileges, and is instruction-only (no code files). It does ask the user to install a CLI which adds software to the system, but the skill itself does not request persistent access to other skills' configs or system files.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tiendanube - After installation, invoke the skill by name or use
/tiendanube - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Auto sync from membranedev/application-skills
Metadata
Frequently Asked Questions
What is Tiendanube?
Tiendanube (Nuvemshop) integration. Manage Recordses. Use when the user wants to interact with Tiendanube (Nuvemshop) data. It is an AI Agent Skill for Claude Code / OpenClaw, with 80 downloads so far.
How do I install Tiendanube?
Run "/install tiendanube" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Tiendanube free?
Yes, Tiendanube is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Tiendanube support?
Tiendanube is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Tiendanube?
It is built and maintained by Vlad Ursul (@gora050); the current version is v1.0.0.
More Skills