Survicate
v1.0.2Survicate integration. Manage Persons, Organizations, Leads, Users, Roles, Filters and more. Use when the user wants to interact with Survicate data.
⭐ 0· 130·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the actions in SKILL.md: all instructions are about installing and using the Membrane CLI to manage Survicate data. There are no unrelated environment variables, binaries, or config paths requested.
Instruction Scope
SKILL.md limits runtime actions to installing/using the Membrane CLI, creating connections, listing/running actions, and proxying API requests through Membrane. It does not instruct reading local files or accessing unrelated system state. It does instruct interactive login via browser, which is expected for this flow.
Install Mechanism
This is an instruction-only skill (no install spec), but it tells users to run 'npm install -g @membranehq/cli'. Global npm installs alter the system environment and pull code from the npm registry; this is proportionate for a CLI-driven integration but is a moderate operational risk—review the CLI package/source before installing and consider using 'npx' or a local install instead.
Credentials
No environment variables or credentials are requested by the skill itself. However, the integration depends on a Membrane account and creates connections that let Membrane manage Survicate credentials and proxy requests — this is expected for the stated design but means you must trust Membrane with proxied API traffic and auth tokens.
Persistence & Privilege
Skill does not request 'always' presence or elevated privileges. It is user-invocable and relies on the Membrane service/CLI for auth; there is no instruction to modify other skills or system-wide agent settings.
Assessment
This skill is coherent with its stated purpose, but it routes Survicate operations through Membrane and asks you to install their CLI. Before installing or using it: (1) verify the @membranehq/cli package and its source (review the GitHub repo), (2) prefer 'npx' or a local install if you want to avoid a global npm install, and (3) understand that Membrane's service will see proxied API requests and hold Survicate credentials — only proceed if you trust that provider and its privacy/security posture.Like a lobster shell, security has layers — review code before you run it.
latestvk9792kq8nm5qe9c066j3wc3xgx842pw2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.