Video Sdk
v1.0.0Video sdk integration. Manage data, records, and automate workflows. Use when the user wants to interact with Video sdk data.
⭐ 0· 28·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Video SDK integration) matches the instructions: all runtime actions are about discovering connectors, creating connections, running actions, and proxying API requests via the Membrane CLI. Nothing in the skill asks for unrelated cloud credentials or system access.
Instruction Scope
SKILL.md only instructs the user/agent to install and use the Membrane CLI, perform login via browser, list and run connector actions, and proxy requests. It does not instruct reading local secrets, scanning arbitrary files, or exfiltrating data to unexpected endpoints; however, proxying requests means Membrane will see the proxied API traffic (expected for this use).
Install Mechanism
There is no automated install spec in the registry (lowest installer risk). The docs recommend installing or invoking @membranehq/cli via npm/npx. Installing a third‑party global npm package is a normal step for this workflow but is a trust/operational consideration (verify package and org before installing).
Credentials
The skill declares no required env vars or credentials and explicitly advises letting Membrane manage auth server-side rather than asking for API keys locally. This is proportionate to the described functionality.
Persistence & Privilege
The skill is not always-on, is user-invocable, and allows normal autonomous invocation. It doesn't request persistent system modifications or access to other skills' configurations.
Assessment
This skill is internally consistent, but before using it consider: 1) Membrane (getmembrane.com/@membranehq) will proxy and see your Video SDK requests and credentials — ensure you trust its privacy/security posture and compliance for your data. 2) The SKILL.md asks you to install @membranehq/cli from npm (or run via npx). Verify the npm org and GitHub repo, and prefer npx or a pinned version if you want fewer global changes. 3) The login flow opens a browser (or prints a URL + code for headless environments) — be cautious to only authenticate to the legitimate Membrane site. 4) If you have strict data/SHOULD/PCI/PHI requirements, review Membrane's documentation and terms before routing sensitive traffic. If you want a deeper assessment, provide the CLI package contents or an install spec so the installer code can be inspected.Like a lobster shell, security has layers — review code before you run it.
latestvk978kjr139wgj0bgwbgaf82bzn848bs1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
