← Back to Skills Marketplace
Tookan
by
Membrane Dev
· GitHub ↗
· v1.0.1
· MIT-0
102
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install tookan
Description
Tookan integration. Manage data, records, and automate workflows. Use when the user wants to interact with Tookan data.
Usage Guidance
This skill could be legitimate but has an unclear authentication model. Before installing or enabling it: 1) Ask the publisher how Tookan authentication is handled — do you provide Tookan API keys directly, or are your credentials routed/stored by Membrane? 2) Verify the privacy and data-handling policy of the Membrane service (where data may be proxied). 3) If possible, inspect the full SKILL.md to confirm which external endpoints the skill uses and whether it ever asks the agent to read local files or env vars. 4) Prefer using an official Tookan integration or a skill that explicitly declares required credentials and their storage. If you must proceed, test with a non-production Tookan account and monitor outgoing network requests.
Capability Analysis
Type: OpenClaw Skill
Name: tookan
Version: 1.0.1
The skill instructs the agent to perform high-risk operations, including the global installation of an external NPM package (@membranehq/cli) and routing all data through a third-party service (getmembrane.com) instead of interacting with the Tookan API directly. While presented as a convenience for authentication, this architecture introduces a significant supply chain dependency and potential data exposure. Additionally, SKILL.md contains an extremely long, repetitive list of 'Task Question' fields that serves no clear functional purpose and could be used for context-window bloating or to obscure other instructions.
Capability Tags
Capability Assessment
Purpose & Capability
The skill's stated purpose is a Tookan integration, which normally requires Tookan API credentials. The registry entry lists no required env vars or primary credential; instead the SKILL.md only says it 'Requires network access and a valid Membrane account.' It's unclear how Tookan authentication is performed (direct Tookan API keys vs. delegated via Membrane). This gap between purpose and declared requirements is unexpected.
Instruction Scope
The skill is instruction-only (SKILL.md) and requires network access via the Membrane service. No code files exist for static review. From the provided excerpt the doc enumerates many Tookan entities (tasks, agents, webhooks, etc.) but does not show explicit runtime commands or file access. Because the SKILL.md is the operative runtime instruction set, the absence of explicit authentication steps or a clear description of which endpoints receive data means the agent could send Tookan data through Membrane or other endpoints — this should be clarified before use.
Install Mechanism
No install spec and no code files — lowest-risk in terms of local install/write operations. Nothing is downloaded or executed on the host by the skill itself.
Credentials
No environment variables or credentials are declared, yet a Tookan integration normally needs credentials (API key/secret). The SKILL.md's reliance on a 'valid Membrane account' suggests authentication/credential management is delegated to an external service; requiring a third-party account without declaring what secrets are used or how they are stored is disproportionate and worth scrutiny (users should know whether their Tookan data/credentials will be handled by Membrane).
Persistence & Privilege
The skill is not always-included and does not request elevated persistence. Autonomous invocation is enabled by default but that is the platform default and not by itself a red flag here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tookan - After installation, invoke the skill by name or use
/tookan - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Auto sync from membranedev/application-skills
v1.0.0
Auto sync from membranedev/application-skills
Metadata
Frequently Asked Questions
What is Tookan?
Tookan integration. Manage data, records, and automate workflows. Use when the user wants to interact with Tookan data. It is an AI Agent Skill for Claude Code / OpenClaw, with 102 downloads so far.
How do I install Tookan?
Run "/install tookan" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Tookan free?
Yes, Tookan is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Tookan support?
Tookan is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Tookan?
It is built and maintained by Membrane Dev (@membranedev); the current version is v1.0.1.
More Skills