Parsioio
v1.0.2Parsio.io integration. Manage Documents, Parsers, Inboxs, Templates, Folders, Users. Use when the user wants to interact with Parsio.io data.
⭐ 0· 96·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to integrate Parsio.io and its SKILL.md explains how to do that via the Membrane CLI. That purpose matches the instructions. However, the registry metadata lists no required binaries or environment variables while the runtime instructions explicitly require npm/node and the @membranehq/cli binary (membrane) and a Membrane account — this mismatch is a documentation/metadata omission.
Instruction Scope
The runtime instructions are scoped to installing and using the Membrane CLI (login, connect, action list/run, proxy requests). They do not instruct reading unrelated files, exporting environment variables, or exfiltrating data outside the Membrane/Parsio flow. Headless login flow prints a URL/code for browser-based auth, which is documented.
Install Mechanism
This is an instruction-only skill (no install spec). It tells the user to run 'npm install -g @membranehq/cli' which pulls a package from the public npm registry and installs a global binary. That is an expected way to get the CLI but carries normal supply-chain risks (global npm package execution). The skill does not provide an install manifest or checksum to verify the package.
Credentials
The skill declares no required env vars and the instructions explicitly say not to ask users for API keys, recommending creating a connection so Membrane handles auth server-side. No unrelated credentials or config paths are requested. Users must trust Membrane with the stored connection credentials.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It does not modify other skills or system-wide agent settings. Agent autonomous invocation is allowed (platform default) but not a special privilege here.
Assessment
Before installing: be aware you will need Node/npm and will install the @membranehq/cli package globally — verify the package and maintainer on npm and review its code or README if you have supply-chain concerns. Understand that Membrane will hold and proxy Parsio/connection credentials on its servers (you are implicitly trusting getmembrane.com for auth lifecycle). The skill metadata omitted required-binary info (membrane), so verify you have the CLI and a Membrane account. If you prefer less risk, install the CLI in a contained environment (VM/container) or review the CLI package source before global installation.Like a lobster shell, security has layers — review code before you run it.
latestvk97dd9r26y5wvz4hn46dw4dnd9843nve
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
