Survser
v1.0.2Survser integration. Manage Organizations. Use when the user wants to interact with Survser data.
⭐ 0· 125·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description say 'Survser integration' and the SKILL.md exclusively describes using the Membrane CLI to discover connectors, create connections, run actions, and proxy requests to Survser. The need for network access and a Membrane account is stated and expected.
Instruction Scope
All runtime instructions are limited to installing/using the Membrane CLI, logging in via browser, listing/creating Membrane connections, running actions, and proxying requests to Survser. The skill does not instruct reading local files, unrelated environment variables, or sending data to endpoints outside Membrane/Survser.
Install Mechanism
There is no automated install spec in the package (instruction-only). The docs instruct the user to run `npm install -g @membranehq/cli` (a normal approach). This requires trusting the npm package and global install; the instructions also suggest `npx ...` in places which is a lower-friction alternative.
Credentials
The skill requests no environment variables, no credentials, and relies on Membrane to manage auth. That is proportionate for a CLI-proxied third-party integration. No unrelated secrets or config paths are requested.
Persistence & Privilege
The skill is not always-enabled and does not request persistent system privileges. It is instruction-only and does not modify other skills or system-wide configuration. Model/autonomous invocation is allowed by default, which is expected behavior and not a red flag by itself.
Assessment
This skill appears coherent: it only tells the agent to use the Membrane CLI to connect to Survser and does not request unrelated credentials or file access. Before installing, you should: 1) verify the @membranehq/cli package on npm/GitHub and confirm the publisher matches getmembrane.com; 2) be aware that `npm install -g` requires elevated rights on some machines (use `npx` or local install if preferred); 3) review Membrane's privacy/security docs since authentication is handled server-side (ensure you trust Membrane to proxy Survser requests); and 4) remember that the agent may invoke the skill autonomously (default platform behavior) — if you want to prevent autonomous use, disable model invocation in your agent settings.Like a lobster shell, security has layers — review code before you run it.
latestvk974c3zvf8j4kpp6v6j01w0gtd84380a
License
MIT-0
Free to use, modify, and redistribute. No attribution required.