Diffbot
v1.0.2Diffbot integration. Manage Articles, Products, Images, Discussions, Videos. Use when the user wants to interact with Diffbot data.
⭐ 0· 90·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill describes Diffbot integration and instructs use of the Membrane CLI to create connections and run Diffbot-related actions. Commands and described features (connect, action list/run, proxy requests) are consistent with a Diffbot integration.
Instruction Scope
The SKILL.md tells the user to install and run the Membrane CLI, log in (browser-based or headless flow), create connections, run actions, and use a proxy to call arbitrary Diffbot endpoints. This stays within the integration scope, but it does advise actions that will expose account-level information (e.g., 'get-account-details' and child tokens) and permit proxying arbitrary API paths — users should be aware these operations access and can surface sensitive account data.
Install Mechanism
There is no registry install spec; the document recommends running 'npm install -g @membranehq/cli' manually. That is a normal, traceable install mechanism for a CLI (npm package name looks legitimate), and nothing is auto-downloaded or executed by the skill itself.
Credentials
The skill declares no required env vars or credentials in the registry. However, it relies on the user having a Membrane account and logging in; some described actions can reveal account details and child tokens. This is proportional to the purpose but is sensitive — the user must consent to and manage the account authentication.
Persistence & Privilege
always is false and the skill does not request persistent system-level privileges or modify other skills. Autonomous invocation is allowed (platform default) which is expected for a skill; no other elevated persistence is requested.
Assessment
This skill is an instruction-only integration that expects you to install and log into the Membrane CLI to interact with Diffbot. Before using it: (1) verify the @membranehq/cli package and the getmembrane.com project are the official vendor you trust; (2) understand that logging in grants the CLI access to your Membrane account and may reveal account details/child tokens and allow proxying arbitrary API endpoints; (3) prefer performing the npm install and initial login yourself (not via automated scripts) and review any created connection IDs or tokens; (4) if you allow autonomous agent invocation, be aware the agent could run Membrane commands it has permission for — restrict the account or use limited-scope credentials if needed.Like a lobster shell, security has layers — review code before you run it.
latestvk977yvtcd2s2w5qt6c3xeaes7s842q3t
License
MIT-0
Free to use, modify, and redistribute. No attribution required.