ClawHub

Grab Your Reviews

v1.0.2

Grab Your Reviews integration. Manage Reviews, Businesses, Users. Use when the user wants to interact with Grab Your Reviews data.

⭐ 0· 117·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (Grab Your Reviews) match the SKILL.md: it explains how to use the Membrane CLI to manage reviews, connections, and proxy requests to Grab Your Reviews. No unrelated environment variables, binaries, or config paths are requested.
✓
Instruction Scope
Runtime instructions are focused: install Membrane CLI, authenticate via browser, create/list connections, list/run actions, and optionally proxy API requests via Membrane. The doc does not instruct reading unrelated files, harvesting environment variables, or sending data to unexpected endpoints.
ℹ
Install Mechanism
There is no built-in install spec, but the SKILL.md instructs users to run `npm install -g @membranehq/cli`. That pulls code from the public npm registry and installs a global binary (requires write privileges). This is expected for a CLI-based integration but is the primary external-installation risk—verify the package and publisher before installing and consider using an isolated environment or inspecting the package source.
✓
Credentials
The skill declares no required env vars or credentials. The instructions explicitly recommend using Membrane connections (browser-based auth) rather than asking for API keys, so requested access is proportional to the integration.
✓
Persistence & Privilege
always is false and there is no install script that modifies other skills or system-wide configs. The skill can be invoked autonomously (platform default), which is normal here and not combined with other privilege/red-flag behaviors.
Assessment
This skill is instruction-only and coherent with its purpose, but it asks you to install the Membrane CLI globally via npm. Before installing: verify the npm package and publisher (@membranehq/cli) on the npm registry and GitHub, consider installing in an isolated environment (or inspect the package contents), and confirm you are comfortable with Membrane handling OAuth and acting as a proxy for your Grab Your Reviews data. If you prefer not to install a global CLI, you can decline the instruction and interact with the API by other vetted means. If you have concerns about autonomous invocation, review or disable the skill when not needed.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dp2vez665f6j4pjekzv6km9842y69

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments