Resurface
v1.0.0Resurface integration. Manage data, records, and automate workflows. Use when the user wants to interact with Resurface data.
⭐ 0· 53·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill describes a Resurface integration and only asks the agent/operator to install and use the Membrane CLI to discover connectors, create connections, run actions, and proxy requests — all directly relevant to interacting with Resurface data.
Instruction Scope
SKILL.md instructs installing and using the Membrane CLI and to perform interactive login flows (browser-based or headless flow). These instructions remain within the integration's scope but do grant the Membrane CLI the ability to send/receive data to external services (expected for a proxy/integration). There are no instructions to read unrelated local files or environment variables.
Install Mechanism
The skill recommends npm install -g @membranehq/cli (a public npm package) and also shows npx usage. This is a standard, expected install method for a CLI but carries the usual risks of installing third-party npm packages globally (write to system PATH, requires privileges). No downloads from untrusted URLs or extracts are present.
Credentials
The skill declares no required environment variables, no credentials, and explains that Membrane manages auth server-side. Requested access (network + a Membrane account) is proportionate to the stated purpose.
Persistence & Privilege
The skill is instruction-only, does not request permanent inclusion (always is false), and does not ask to modify other skills or system-wide agent settings. Autonomous invocation is allowed by default but is not combined with other high-risk flags.
Assessment
This skill is coherent with its stated purpose, but review these practical considerations before installing: 1) The instructions require installing the @membranehq/cli npm package (global install modifies your system PATH and may need admin rights) — prefer using npx if you want to avoid a global install. 2) Membrane will act as a proxy and manage authentication server-side, which means API requests and any data you send will pass through Membrane/Resurface — confirm you trust those services and the privacy/security implications. 3) If you need stronger assurance, inspect the @membranehq/cli package on npm/github (repository referenced in SKILL.md) before running it. 4) If you are concerned about an agent autonomously invoking this skill, restrict autonomous capabilities in your agent settings or require explicit user confirmation before running CLI commands that transmit data.Like a lobster shell, security has layers — review code before you run it.
latestvk971k7kvak75c9mss7rcwx10458488e0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.