Reviewsio
v1.0.2Reviews.io integration. Manage Reviews, Products, Companies. Use when the user wants to interact with Reviews.io data.
⭐ 0· 93·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Reviews.io integration) align with the runtime instructions: all actions are performed via the Membrane CLI and its Reviews.io connector. No unrelated credentials, binaries, or system paths are requested.
Instruction Scope
SKILL.md only instructs installing/using the Membrane CLI, performing connector discovery/connection, running actions, and proxied API requests. It does not instruct reading arbitrary files, accessing unrelated env vars, or exfiltrating data. It appropriately instructs browser-based OAuth flows for authentication.
Install Mechanism
This is an instruction-only skill (no automatic install). It tells the user to install @membranehq/cli via npm (-g) or use npx. Installing a third-party global npm package is a user action and normal for this use case, but it does execute code on the host — users should prefer npx or inspect the package if concerned.
Credentials
The skill declares no required env vars or secrets. Authentication is delegated to Membrane via browser flows and connector creation, which is proportionate for a 3rd-party API integration.
Persistence & Privilege
Skill is not always-enabled and does not request elevated or persistent agent privileges. It does not modify other skills or system-wide settings.
Assessment
This skill delegates Reviews.io access to the Membrane CLI rather than asking for API keys; that's coherent but means you must trust Membrane with your Reviews.io credentials. Before installing or running commands: (1) verify the @membranehq/cli npm package and its publisher (or prefer using npx to avoid a global install), (2) review Membrane's privacy/security docs to understand how it stores and uses connector credentials, and (3) perform initial testing with a limited/test Reviews.io account or in an isolated environment if you are concerned about data access. If you don't want to install third-party CLIs, decline the skill or ask for a version that uses direct Reviews.io API keys (but be aware that would require you to provide those keys).Like a lobster shell, security has layers — review code before you run it.
latestvk977203v3wd6ja7t85v6mxe30h8431km
License
MIT-0
Free to use, modify, and redistribute. No attribution required.