Google Cloud Vision
v1.0.2Google Cloud Vision integration. Manage Images. Use when the user wants to interact with Google Cloud Vision data.
⭐ 0· 126·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the runtime instructions: the skill directs use of the Membrane CLI to connect to Google Cloud Vision, list actions, run them, or proxy requests. No unrelated services, binaries, or credentials are requested.
Instruction Scope
SKILL.md stays within the declared purpose (install Membrane CLI, login, create a connector, run actions, proxy requests). Minor discrepancy: the registry metadata lists 'Required binaries: none' but the instructions explicitly tell users to install and run the @membranehq/cli (npm global). This is a small manifest/instruction mismatch but not a functional red flag.
Install Mechanism
There is no install spec in the registry (instruction-only). The instructions advise installing @membranehq/cli via 'npm install -g', which is a public npm package (traceable) but will create a global binary on disk and requires network and possible elevated permissions. No downloads from untrusted URLs or archive extraction are recommended.
Credentials
The skill requests no environment variables or local config paths. SKILL.md explicitly instructs not to ask users for GCP API keys and to rely on Membrane's server-side credential handling, so requested privilege is proportional to the stated functionality.
Persistence & Privilege
The skill is not always-enabled and does not request system-level persistence or modify other skills. Autonomous invocation is enabled by default on the platform (normal), and there are no additional elevated privileges requested.
Assessment
This skill appears internally consistent: it uses Membrane as a proxy to access Google Cloud Vision and does not ask for unrelated secrets. Before installing, consider the following: (1) Installing '@membranehq/cli' globally will write a binary to your system—review the npm package and its GitHub repo to ensure you trust it. (2) Membrane will broker auth to Google Cloud on your behalf—verify Membrane's security, privacy policy, and what scopes the connector requests, because the service will hold or exchange credentials for you. (3) The SKILL.md contradicts the registry metadata by requiring the Membrane CLI even though 'Required binaries' is empty—expect to install that CLI. (4) If you prefer not to give a third-party service access to your GCP data, use direct Google Cloud credentials or a different integration pattern. Finally, remember that the platform allows autonomous invocation by default: if you are uncomfortable with the agent invoking this skill without prompts, adjust skill invocation controls in your agent settings.Like a lobster shell, security has layers — review code before you run it.
latestvk97ax5wbn8wbrp0xd1kk3tcepn84320w
License
MIT-0
Free to use, modify, and redistribute. No attribution required.