Productiveio

v1.0.2

Productive.io integration. Manage Organizations. Use when the user wants to interact with Productive.io data.

0· 101·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description, claimed capabilities, and required actions all focus on interacting with Productive.io via Membrane. No unrelated credentials, binaries, or capabilities are requested.
Instruction Scope
SKILL.md instructs the agent to install/run the Membrane CLI and use it to list/connect/run actions or proxy requests to Productive.io. It does not instruct reading unrelated files, harvesting environment variables, or sending data to unknown endpoints.
Install Mechanism
Installation is an npm global install of @membranehq/cli (npm install -g). This is a common way to install CLIs but requires trusting the npm package and granting a global binary; consider using npx or a pinned version if you want less system-wide impact.
Credentials
The skill declares no environment variables or credentials and explicitly instructs not to ask users for API keys, relying on Membrane-managed connections instead. Requested access is proportionate to the stated purpose.
Persistence & Privilege
The skill is instruction-only, has no always:true flag, and does not request persistent system-level privileges or modify other skills' configurations.
Assessment
This skill is coherent: it delegates auth and API calls to the Membrane service and asks you to install the Membrane CLI. Before installing, verify you trust @membranehq on npm and the Membrane service (review getmembrane.com and the referenced GitHub repo). If you prefer not to install a global npm package, use npx @membranehq/cli@<version> or run the CLI in an isolated environment. Remember that Membrane will handle credentials server-side — you are trusting their service with your Productive.io connection, so review their privacy and security docs before proceeding.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fm2drwns1nj9wtzx47ce1xx8427wd

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments