Google Address Validation
v1.0.2Google Address Validation integration. Manage data, records, and automate workflows. Use when the user wants to interact with Google Address Validation data.
⭐ 0· 71·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name and description match the instructions: the skill instructs using the Membrane CLI to connect to Google Address Validation. No unrelated environment variables, binaries, or config paths are requested.
Instruction Scope
All runtime instructions are limited to installing and using the Membrane CLI, creating connections, listing actions, running actions, or proxying requests through Membrane. There are no directives to read local files, shell history, or other unrelated system state. Important: proxying requests means address data will be sent to Membrane's service (not directly to googleapis.com), so users must trust Membrane for any data sent via the proxy.
Install Mechanism
There is no install spec in the skill bundle; it is instruction-only. The SKILL.md recommends installing @membranehq/cli globally via npm (npm install -g), which is a normal approach but runs third-party package install scripts on the host. The skill itself does not perform any automated installs or write files.
Credentials
The skill requests no environment variables or credentials and explicitly advises against asking users for API keys, delegating auth to Membrane. This is proportionate, but it implies you must trust Membrane to hold and manage your Google credentials securely.
Persistence & Privilege
always is false, there is no install-time persistence or modification of other skills/settings. The skill is user-invocable and can be invoked autonomously by the agent per platform defaults, but that autonomous capability is normal and not combined with other concerning privileges here.
Assessment
This skill is coherent, but before installing or using it: (1) recognize that requests and address data will be proxied through Membrane — review Membrane's privacy, security, and hosting policies and confirm they meet your requirements; (2) verify the authenticity of the @membranehq/cli package and the membrane project (check the npm package page, repository, and publisher) before running npm install -g; (3) if you cannot or do not want to route sensitive address data through a third party, consider integrating directly with Google's Address Validation API using your own credentials; (4) if you are concerned about autonomous agent calls, control or disable autonomous invocation in your agent settings.Like a lobster shell, security has layers — review code before you run it.
latestvk970mzzgbcfjwcyg9yj2t204bd84295t
License
MIT-0
Free to use, modify, and redistribute. No attribution required.