Uservoice
v1.0.0UserVoice integration. Manage data, records, and automate workflows. Use when the user wants to interact with UserVoice data.
⭐ 0· 73·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the instructions: the SKILL.md consistently directs the agent to use the Membrane CLI to connect to and act on UserVoice. No unrelated services, env vars, or binaries are requested.
Instruction Scope
Runtime instructions are limited to installing and using the Membrane CLI, logging in, creating/listing connections, listing/running actions, and proxying requests to UserVoice. The doc does not instruct reading unrelated files, environment variables, or sending data to unexpected endpoints.
Install Mechanism
The skill is instruction-only but tells users to install @membranehq/cli globally via npm (npm install -g). This is expected for a CLI-based integration but carries the usual npm/global-install risks (trust of the package/maintainer, elevated install permissions).
Credentials
No environment variables or local credentials are required by the skill. Authentication is delegated to Membrane (browser OAuth or headless code flow) which is proportionate for this use case.
Persistence & Privilege
Skill is not forced-always-on and does not request modifications to other skills or system-wide configuration. It relies on user-run CLI interactions and Membrane-managed connections.
Assessment
This skill is coherent but a few practical cautions: 1) You will install the third-party @membranehq/cli package globally — verify the package and vendor before installing. 2) Using the skill delegates authentication and API calls to Membrane, so you are trusting Membrane with access to your UserVoice data; review their privacy, OAuth scopes, and terms. 3) The CLI can proxy arbitrary API requests to UserVoice (membrane request), so ensure you only run requests you understand. 4) Prefer running one-off commands with npx if you want to avoid a global install. If you are comfortable trusting Membrane and installing the CLI, this skill appears consistent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk973e6gxwcybhnfgznbp4y3yxn84a810
License
MIT-0
Free to use, modify, and redistribute. No attribution required.