Countdown Api
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill is presented as a Countdown API integration, but its instructions include unrelated eBay actions and broad authenticated Membrane commands, so it needs review before use.
Review this skill before installing. The Membrane login and CLI usage are normal for this integration, but the included eBay action list does not match the Countdown API description. Verify the actual available Countdown actions after connecting, avoid unrelated actions, and get explicit confirmation before running direct proxy requests that change data.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may try to use actions that do not match the advertised Countdown API purpose, making the integration unreliable and potentially causing the user to authenticate or run commands based on misleading guidance.
The skill claims to manage Countdown API data, but the documented popular actions are for eBay products, deals, seller feedback, and reviews. This creates a concrete purpose mismatch and could mislead a user or agent about what service is being controlled.
| Get Autocomplete Suggestions | get-autocomplete-suggestions | Get search autocomplete suggestions for a partial search term on eBay |
Do not rely on the listed actions until the skill documentation is corrected to show actual Countdown API actions. Verify the connection and available actions manually before making changes.
If used carelessly, direct proxy requests could change Countdown API data or call endpoints the user did not intend.
The skill documents a raw proxy request path that can send authenticated API requests beyond pre-defined actions. This is useful for an API integration, but it is broader than a narrowly scoped action list.
you can send requests directly to the Countdown API API through Membrane's proxy ... injects the correct authentication headers
Use predefined actions when possible, and require explicit user confirmation before running direct proxy requests that create, update, delete, or publish data.
The agent may be able to operate through the user's authenticated Membrane/Countdown connection.
The skill requires the user to authenticate with Membrane and then connect to the Countdown API. This is expected for the integration, but it grants delegated account access.
Requires network access and a valid Membrane account ... membrane login --tenant --clientName=<agentType>
Authenticate only with an account you intend the agent to use, and review Membrane connection permissions before allowing mutating actions.
The behavior depends on whatever version of the Membrane CLI is current at install time.
The installation step pulls the latest Membrane CLI from npm globally. This is central to the skill's stated operation, but it is an external, version-floating dependency.
npm install -g @membranehq/cli@latest
Install the CLI only if you trust Membrane and npm for this package; prefer a pinned version if reproducibility is important.
Provider-supplied instructions could influence the agent's next steps during setup.
The skill tells the agent it may receive procedural instructions from the external Membrane connection response. This is part of the provider workflow, but remote instructions should not override the user's intent or safety checks.
`clientAction.agentInstructions` (optional) — instructions for the AI agent on how to proceed programmatically.
Treat returned agent instructions as advisory provider guidance, not as authority to override the user's request or skip confirmations.