Product Fruits
v1.0.2Product Fruits integration. Manage ProductFruitsApps. Use when the user wants to interact with Product Fruits data.
⭐ 0· 94·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description indicate a Product Fruits integration and the SKILL.md exclusively documents how to use Membrane to connect to Product Fruits and run actions — the requested capabilities match the stated purpose.
Instruction Scope
Instructions tell the agent (and user) to install and run the Membrane CLI, perform browser-based login, create connections, list actions, run actions, or proxy raw API requests through Membrane. This stays within the integration scope, but all proxied API traffic and authentication are routed through the Membrane service, so users should expect data to transit a third party.
Install Mechanism
There is no automated install spec in the registry (instruction-only). The SKILL.md recommends installing @membranehq/cli via npm (-g). Requiring an npm global install is reasonable for a CLI but introduces normal supply-chain/system-change considerations; alternatives like npx (mentioned elsewhere) reduce that footprint.
Credentials
The skill declares no required environment variables or secrets. Authentication is delegated to Membrane (browser login / server-side credential management), which is proportionate to the described functionality.
Persistence & Privilege
The skill is not always-enabled, does not request elevated platform privileges, and does not modify other skills or system-wide agent config. It's an on-demand, user-invoked integration.
Assessment
This is an instruction-only integration that uses the Membrane CLI to access Product Fruits — the pieces are coherent. Before proceeding: 1) Be aware that using this skill routes requests and any proxied data through Membrane's servers (review Membrane's privacy/security policies if your data is sensitive). 2) Installing an npm package globally modifies your system; consider using npx or reviewing the package repository (https://github.com/membranedev) and the npm package contents before installing. 3) The skill requests no local secrets, but it requires a Membrane account and browser login; confirm the login flow and scopes during connector creation. 4) Because this is instruction-only, the static scanner had no code to analyze — verify the referenced CLI/tools are legitimate and up-to-date before use.Like a lobster shell, security has layers — review code before you run it.
latestvk975prek0rk8spwj94sgewp2ax842exm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.