Scoredetect
v1.0.2ScoreDetect integration. Manage Organizations. Use when the user wants to interact with ScoreDetect data.
⭐ 0· 110·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill name/description (ScoreDetect / Manage Organizations) broadly aligns with the SKILL.md which focuses on interacting with ScoreDetect via Membrane. Minor mismatch: the description mentions 'Manage Organizations' but the runtime instructions focus on connector actions/requests rather than explicit organization-management workflows.
Instruction Scope
SKILL.md instructs only to install and use the Membrane CLI, authenticate via browser, create connections, list/run actions, or proxy API requests. It does not instruct reading unrelated files, exporting environment variables, or exfiltrating data to unexpected endpoints. It explicitly advises against asking users for API keys.
Install Mechanism
Install is instruction-only and asks the user to install @membranehq/cli via npm (global). That is a standard approach but has moderate risk compared with no install step because it writes a global binary; user should verify the package source and trustworthiness before installing globally.
Credentials
The skill requests no environment variables, no config paths, and no primary credential. It relies on Membrane-managed authentication (browser flow), which is proportionate for a connector-based integration.
Persistence & Privilege
No elevated privileges are requested. always is false and the skill is user-invocable. It requires a Membrane account and CLI login but does not request permanent platform-level presence or modification of other skills.
Assessment
This skill is instruction-only and uses the Membrane CLI to access ScoreDetect via a connector. Before installing or running commands: (1) verify you trust the @membranehq/cli npm package and the getmembrane.com project (check the GitHub repository and publisher identity), (2) be prepared to authenticate via a browser flow — this will grant Membrane access to the connected ScoreDetect account, so review connector scopes and permissions in their UI, (3) avoid pasting API keys locally (the skill explicitly recommends letting Membrane handle credentials), and (4) note the minor mismatch in the description about 'Manage Organizations' — if you need org-level operations, confirm the available actions via membrane action list before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk97c7b4ma9b52q37x7npq2dmd98427gn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.