Rocketreach
v1.0.2RocketReach integration. Manage data, records, and automate workflows. Use when the user wants to interact with RocketReach data.
⭐ 0· 70·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the content of SKILL.md: the skill directs the agent to use the Membrane CLI as a proxy to RocketReach and only needs network access and a Membrane account. There are no unrelated credentials, binaries, or config paths requested.
Instruction Scope
SKILL.md only instructs installing and using the Membrane CLI, logging in via browser, creating connections, listing actions, running actions, and proxying requests to RocketReach — all within the stated purpose. It does not ask the agent to read arbitrary files, harvest unrelated environment variables, or send data to unexpected endpoints.
Install Mechanism
There is no automatic install spec in the registry; the doc recommends installing @membranehq/cli via npm -g (or using npx examples). Installing a global npm package runs third-party code from the npm registry, which is expected for a CLI but carries the usual supply-chain risk — verify the package and publisher before installing.
Credentials
The skill declares no required env vars or credentials and explicitly recommends creating a Membrane connection instead of collecting API keys locally. This is proportionate to the stated goal.
Persistence & Privilege
always is false and model invocation is allowed (platform default). The skill does not request persistent system-wide privileges or to modify other skills' configs.
Assessment
This skill appears coherent: it tells you to install and use the Membrane CLI to access RocketReach, and it doesn't ask for unrelated credentials. Before installing/using it: 1) verify the @membranehq/cli package and publisher on the npm registry (or prefer using npx to avoid a global install), 2) understand that you will grant Membrane (a third-party service) access to RocketReach data when you create a connection — review their privacy/terms, and 3) be mindful that installing CLI tooling runs third-party code on your machine. If any of those steps are unacceptable, do not install the CLI or create the connection.Like a lobster shell, security has layers — review code before you run it.
latestvk978hhrzbv3nzmwvbjqh44c8v5842t5k
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
