Surveymethods
v1.0.2SurveyMethods integration. Manage Surveys, Responses, Users. Use when the user wants to interact with SurveyMethods data.
⭐ 0· 70·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to integrate with SurveyMethods and its SKILL.md consistently instructs using the Membrane CLI to connect, list actions, run actions, and proxy raw API requests — this aligns with the stated purpose. Minor inconsistency: the registry metadata lists no required binaries, but the instructions require installing and running the Node/npm-based Membrane CLI (npm / npx / membrane).
Instruction Scope
Instructions stay within the integration scope (install CLI, authenticate via Membrane, run actions, proxy API calls). They do not instruct reading unrelated local files or extracting other credentials. Important operational note: using the skill will route requests and survey data through Membrane's service (proxy), so user data and auth tokens are handled server-side by that third party.
Install Mechanism
There is no formal install spec in the registry, but SKILL.md tells users to run 'npm install -g @membranehq/cli' or use npx. Installing a public npm CLI is a common but moderate-risk action (global package install modifies the environment). The absence of a declared install requirement (npm/node) in metadata is an inconsistency to be aware of.
Credentials
The skill declares no required environment variables or credentials and explicitly instructs not to ask users for API keys; authentication is delegated to Membrane. This is proportionate — only caveat is that credentials are stored/managed by Membrane, so trusting that third party is necessary.
Persistence & Privilege
The skill is instruction-only, has no install-time alterations declared, and is not always-enabled. It does not request elevated or persistent system privileges in the manifest.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to talk to SurveyMethods. Before installing/using it, confirm you have Node/npm (the SKILL.md requires installing @membranehq/cli) and be comfortable installing a global npm package. Most importantly, understand that authentication and request proxying happen through Membrane's service: survey data and access tokens will be handled server-side by Membrane, so review their documentation/privacy policy and verify you trust that vendor. Also note the registry metadata does not declare the CLI/npm dependency listed in SKILL.md — consider asking the publisher to update the manifest or provide an explicit install spec. If you need stricter data control, avoid using the proxy mode and use direct API integrations that you host or audit.Like a lobster shell, security has layers — review code before you run it.
latestvk9788fpc95rc927m6grhwnn2a9843k89
License
MIT-0
Free to use, modify, and redistribute. No attribution required.