Qualaroo
v1.0.2Qualaroo integration. Manage Surveys, Questions, Answers. Use when the user wants to interact with Qualaroo data.
⭐ 0· 136·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Qualaroo integration) match the instructions: installing/using the Membrane CLI to connect to Qualaroo, list actions, run actions, or proxy requests. The required capabilities (network access, Membrane account) are expected for this purpose.
Instruction Scope
SKILL.md only instructs installing/running the Membrane CLI, creating connections, discovering and running actions, and proxying requests to the Qualaroo API. It does not instruct reading unrelated files, exfiltrating local secrets, or modifying unrelated system configuration.
Install Mechanism
The skill recommends npm install -g @membranehq/cli (a public npm package). This is a standard approach but carries the usual npm/global-install risks (package trust, supply-chain). The skill also suggests npx for some commands, which reduces persistent footprint. No obscure downloads or archive extraction are present.
Credentials
The skill declares no required environment variables or local credentials and relies on Membrane to manage auth server-side. That is proportionate for a proxy-based integration. Users should note that data and API credentials will be handled by Membrane's service.
Persistence & Privilege
always is false and the skill does not request elevated or permanent agent-wide privileges. There is no instruction to modify other skills or system-wide agent settings.
Assessment
This skill is an instruction-only integration that uses the Membrane CLI to talk to Qualaroo. Before installing: (1) confirm you trust the @membranehq package on npm (consider using npx for one-off use instead of a global install), (2) be aware authentication is delegated to Membrane (your Qualaroo API access will be proxied through their service), and (3) expect the CLI to open a browser for OAuth-like login flows. If you have policy or privacy concerns about routing API traffic through a third party, review Membrane's terms/privacy and consider using Qualaroo's API directly.Like a lobster shell, security has layers — review code before you run it.
latestvk974ac4sfz5xvk6nhaanzkjbd5842ktp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.