Questionpro
v1.0.2QuestionPro integration. Manage Surveys, Reports, Users, Groups. Use when the user wants to interact with QuestionPro data.
⭐ 0· 104·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description say this is a QuestionPro integration and the SKILL.md only instructs using the Membrane CLI to discover/connect/run actions or proxy requests to QuestionPro. There are no unrelated environment variables, binaries, or config paths requested.
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, performing membrane login/connect/action/list/action/run and using membrane request as a proxy to QuestionPro. The instructions do not ask the agent to read unrelated files, harvest system state, or exfiltrate data to other endpoints. They do require network access and a Membrane account, which is appropriate.
Install Mechanism
This is instruction-only (no install spec in registry), but the SKILL.md tells the user to install the CLI via `npm install -g @membranehq/cli` (or use npx). Installing an npm CLI from the public registry is a reasonable, expected step for this integration, but it carries the usual npm-install risks — verify the package source/repository before installing and prefer npx if you want to avoid a global install.
Credentials
The skill requests no environment variables or credentials and explicitly advises against asking users for API keys (Membrane handles auth). The needed credentialing flows (browser OAuth via `membrane login` and connection creation) are consistent with the stated purpose.
Persistence & Privilege
always:false and normal autonomous invocation settings are used. The instructions require performing a CLI login/connect which will create a connection stored in Membrane (and likely store local CLI session state), but this is expected for an integration and is within scope.
Assessment
This skill is a usage guide for the Membrane CLI and appears coherent. Before installing or running commands: 1) Verify the npm package and repository (https://github.com/membranedev/application-skills and https://getmembrane.com) to ensure you trust the publisher. 2) Prefer `npx @membranehq/cli@latest` if you want to avoid a global install. 3) Understand that `membrane login` will open a browser and create a connection; check what data the Membrane service will have access to in its privacy/security docs. 4) Do not share API keys or secrets outside the official Membrane flow. If you want stronger assurance, review the @membranehq/cli source code or audit the package before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk97dqz81d8ea0htm2j6de4hhbd842a3d
License
MIT-0
Free to use, modify, and redistribute. No attribution required.