Puppet

Puppet integration. Manage data, records, and automate workflows. Use when the user wants to interact with Puppet data.

This skill appears coherent, but consider the following before installing: 1) It asks you to install the Membrane CLI via 'npm install -g', which runs code during installation — only proceed if you trust the @membranehq package and review its npm page/repository. 2) Using the skill requires a Membrane account and creating a connection that will hold whatever Puppet credentials you provide — verify you trust Membrane (homepage/repo) to store/handle those credentials. 3) Prefer performing the install in an isolated or controlled environment if you are cautious about global npm installs. 4) Verify the connector's permissions on the Puppet side (least privilege) and avoid providing unrelated credentials. 5) Because this is an instruction-only skill, it does not itself contain code; risk primarily comes from the external CLI and the Membrane service it uses.

Type: OpenClaw Skill Name: puppet Version: 1.0.1 The skill functions as a wrapper for the Membrane CLI, requiring the agent to install a global npm package (@membranehq/cli) and delegate all authentication and logic to an external service (getmembrane.com). SKILL.md contains an extensive list of irrelevant keywords (e.g., 'Blockchain', 'Robotics', 'Artificial Intelligence') that are unrelated to Puppet infrastructure management, suggesting automated or low-quality content generation. While there is no explicit evidence of malicious intent, the requirement for high-privilege installation and the opaque execution of actions via a third-party platform warrant a suspicious classification.