Barcode Lookup
v1.0.2Barcode Lookup integration. Manage data, records, and automate workflows. Use when the user wants to interact with Barcode Lookup data.
⭐ 0· 116·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions: the SKILL.md consistently instructs the agent to use the Membrane CLI to connect to Barcode Lookup and run queries or proxy requests. No unrelated services, credentials, or system subsystems are requested.
Instruction Scope
Instructions are scoped to installing and using the Membrane CLI, creating connections, listing actions, running actions, and proxying requests through Membrane. They do not instruct reading local files, exporting system credentials, or contacting other external endpoints. Note: the 'membrane request' command can proxy arbitrary API paths for the connected service, so the agent could send any API calls that the user’s connection permits — this is expected but worth being aware of.
Install Mechanism
This is an instruction-only skill (no install spec). The SKILL.md tells users to run `npm install -g @membranehq/cli`. That is a normal way to obtain a CLI but involves installing a global npm package from the public registry; users should verify the package and source before running global installs.
Credentials
The skill declares no required environment variables or credentials and explicitly advises letting Membrane manage credentials (no API keys requested). The requirement for a Membrane account and network access is proportionate to the stated purpose.
Persistence & Privilege
The skill is not always-enabled and does not request elevated or persistent system privileges. It does not modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) but not exceptional here.
Assessment
This skill appears internally consistent: it instructs the agent to use the Membrane CLI to access Barcode Lookup and does not ask for unrelated secrets. Before installing or running commands: 1) Verify the @membranehq/cli package and the getmembrane.com / repository sources are legitimate; 2) Be cautious when running global npm installs (they affect your user environment); 3) Understand that Membrane will hold and proxy credentials and that the `membrane request` proxy can perform any API calls permitted by the connection — grant connections only to trusted accounts and services; 4) If you need a higher assurance, review Membrane's documentation and the CLI codebase (or install in a contained environment) before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk979xth2w6h0f2spdht2bppe81842pwz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.