Reflect
v1.0.0Reflect integration. Manage data, records, and automate workflows. Use when the user wants to interact with Reflect data.
⭐ 0· 71·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The SKILL.md clearly depends on the Membrane CLI, network access, and a Membrane account to interact with Reflect. That is coherent with a Reflect integration, but the registry metadata lists no required binaries or credentials — a small inconsistency (the skill should declare the CLI and network/account requirement).
Instruction Scope
Instructions are narrowly scoped to using the Membrane CLI (login, connect, run actions, and proxy requests). They do not instruct reading unrelated files or local secrets. However, using the proxy means request/response data will flow through Membrane's service (getmembrane.com), so you should expect data to leave the local environment and be handled by Membrane.
Install Mechanism
There is no formal install spec in the registry, but SKILL.md instructs installing @membranehq/cli via 'npm install -g'. That pulls code from the npm registry and installs it globally (may require elevated privileges). This is a moderate-risk install pattern and should be reviewed/trusted before running.
Credentials
The skill does not request local environment variables or API keys and explicitly tells agents to let Membrane manage credentials. Requiring a Membrane account is proportional to the stated functionality.
Persistence & Privilege
The skill is instruction-only, does not request permanent/autonomous 'always' inclusion, and does not attempt to modify other skills or system-wide settings. Normal autonomous invocation (disable-model-invocation: false) is in effect.
Assessment
This skill appears to be what it says: it uses Membrane to access Reflect. Before installing or using it, verify you trust the Membrane service and review its privacy/security policy because data and auth flows go through Membrane. Be aware the SKILL.md asks you to run a global npm install (@membranehq/cli) — global installs can modify your system PATH and may require elevated permissions, so prefer installing in a controlled environment or checking the package source. Also note the registry metadata did not declare the CLI or network/account requirement — confirm that requirement with the skill publisher if you need an explicit declaration.Like a lobster shell, security has layers — review code before you run it.
latestvk97f3eb0r29efvsxfbxgv49gsh845y7z
License
MIT-0
Free to use, modify, and redistribute. No attribution required.