Dropbox Business
v1.0.0Dropbox Business integration. Manage data, records, and automate workflows. Use when the user wants to interact with Dropbox Business data.
⭐ 0· 54·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description describe a Dropbox Business integration and the instructions only require the Membrane CLI (an expected dependency for a Membrane-based connector). No unrelated credentials, binaries, or file paths are requested.
Instruction Scope
SKILL.md confines runtime actions to installing/using the Membrane CLI, creating connections, listing actions, running actions, and proxying requests to Dropbox APIs via Membrane. It does not instruct reading arbitrary local files, other secrets, or posting data to unknown endpoints.
Install Mechanism
The guide recommends installing @membranehq/cli via npm (-g). Installing an npm global package is a reasonable approach for a CLI dependency but has moderate supply-chain/execution risk (npm install runs package scripts). This is expected for a CLI-based skill but users should verify the package origin before installing.
Credentials
No environment variables or local credentials are requested. The skill explicitly instructs using Membrane to manage auth server-side and tells users not to provide API keys locally, which is proportionate.
Persistence & Privilege
The skill does not request always: true or special system privileges and does not instruct modifying other skills or global agent configuration. Autonomous invocation is allowed by default, which is normal for skills.
Assessment
This skill delegates Dropbox Business access to the Membrane service and its CLI. Before installing: verify you trust @membranehq and the getmembrane.com project (npm package authorship and homepage), because installing an npm CLI runs code on your machine. Understand that connecting through Membrane gives that service the ability to access/manage your Dropbox Business data (tokens and proxying are handled server-side), so only connect accounts you are comfortable delegating. If you want stricter control, avoid installing the global CLI or perform connections in a restricted environment; review Membrane's privacy/security docs and the connector's permissions before authorizing.Like a lobster shell, security has layers — review code before you run it.
latestvk970r9wqj0hsvn9re3k5s0nx8d84bp38
License
MIT-0
Free to use, modify, and redistribute. No attribution required.