Bizzon
v1.0.2Bizzon integration. Manage data, records, and automate workflows. Use when the user wants to interact with Bizzon data.
⭐ 0· 86·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Bizzon integration) match the instructions: all actions go through the Membrane CLI and proxy to Bizzon's API. Required network access and a Membrane account are declared in SKILL.md and are appropriate for this purpose.
Instruction Scope
SKILL.md contains step-by-step CLI commands (login, connect, action list/run, proxy requests). These instructions stay within the stated goal (discover and run Bizzon actions via Membrane). They do request the user to authenticate in a browser (standard OAuth flow) and to run CLI commands locally, which is expected for this integration.
Install Mechanism
The registry has no formal install spec (instruction-only), but SKILL.md tells users to install the Membrane CLI via npm (or use npx). This is reasonable; note that the skill expects the environment to have the CLI available at runtime. Installing global npm packages has typical supply-chain considerations but is not intrinsically disproportionate here.
Credentials
The skill does not request environment variables, secret tokens, or config paths. Authentication is delegated to Membrane's OAuth/connection flow, which is consistent with the guidance in the doc (do not ask users for API keys).
Persistence & Privilege
The skill does not request always:true, does not modify other skill configs, and does not ask for persistent system privileges. It relies on user-driven CLI commands and browser-based auth, which is appropriate.
Assessment
This skill delegates all auth and API calls to the Membrane service and its CLI. Before installing or running it: 1) Verify you trust Membrane (https://getmembrane.com) because proxied requests and stored connections will be visible to their service; 2) Prefer using npx to avoid a global npm install, or review the CLI package before installing; 3) Expect the CLI to open a browser for OAuth sign-in (or produce a code for headless flows); 4) Confirm the Bizzon connector you create has the intended scopes/permissions. If you need a higher assurance, review Membrane's privacy/security docs and the referenced repository before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk971rck1yyrj6zh6w4rqnz711d8422t5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.