Surveycto
v1.0.2SurveyCTO integration. Manage Surveys. Use when the user wants to interact with SurveyCTO data.
⭐ 0· 121·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description (SurveyCTO integration) matches the instructions: it teaches the agent to install and use the Membrane CLI to connect to SurveyCTO, list connections/actions, run actions, and proxy API requests. There are no unrelated requirements (no unexpected cloud credentials, binaries, or system paths).
Instruction Scope
All runtime instructions are limited to installing/using the Membrane CLI (npm install / npx), performing browser-based login flows, creating connections, listing/running actions, and proxying API calls via Membrane. The SKILL.md does not instruct reading arbitrary files, scanning environment variables, or exfiltrating data to third-party endpoints beyond Membrane/SurveyCTO.
Install Mechanism
This is an instruction-only skill (no install spec in the registry), but it directs users to install @membranehq/cli with npm -g or use npx. Installing a global npm package is a normal, proportional install step for a CLI-based integration; however, npm packages carry typical supply-chain risk—verify the package name, publisher, and repository before installing. Using npx avoids a global install.
Credentials
The skill declares no required environment variables or config paths. It explicitly delegates credential management to Membrane and advises against collecting API keys locally, which is proportionate. Note: credentials will be handled/stored by the Membrane service (server-side), so confirm you trust that third party for any sensitive SurveyCTO data.
Persistence & Privilege
The skill does not request always:true or elevated persistence. It is user-invocable and allows normal autonomous invocation, which is the platform default. The skill does not instruct modifying other skills or system-wide agent configs.
Assessment
This skill is coherent and uses the Membrane CLI to interact with SurveyCTO. Before installing or following the instructions: 1) Verify the @membranehq/cli package and publisher on npm and inspect the linked GitHub repo to ensure authenticity; prefer using npx if you want to avoid a global install. 2) Understand that Membrane will manage and store SurveyCTO credentials server-side—confirm you trust that third party and that this complies with your data/privacy rules. 3) Running membrane login opens a browser-based OAuth flow—use headless flow instructions if working on a server. 4) If you have strict supply-chain or privacy requirements, review Membrane's privacy/security documentation or run the CLI in an isolated environment.Like a lobster shell, security has layers — review code before you run it.
latestvk97ednw0zfa99rktbws6w6b64x8426ks
License
MIT-0
Free to use, modify, and redistribute. No attribution required.