Vimeo
v1.0.2Vimeo integration. Manage Videos. Use when the user wants to interact with Vimeo data.
⭐ 0· 207·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description say 'Vimeo integration' and the SKILL.md exclusively documents using the Membrane CLI to connect to Vimeo, list resources, run actions, and proxy API calls. Required capabilities (network, Membrane account, Membrane CLI) are coherent with the described purpose.
Instruction Scope
SKILL.md only instructs installing/running the Membrane CLI, logging in via browser, creating/checking a Membrane connection, running predefined actions, and (optionally) proxying requests to Vimeo via Membrane. It does not ask the agent to read unrelated files or environment variables, nor to exfiltrate data to unexpected endpoints. Note: proxying allows arbitrary requests to the Vimeo API through Membrane, so actions that modify or delete Vimeo resources (e.g., delete-video) are available and should be used intentionally.
Install Mechanism
This is an instruction-only skill (no install spec), but it tells users to run a global npm install of @membranehq/cli. That is a reasonable install method for a CLI integration, but installing a global npm package writes executables to disk and should be done from a trusted source; the skill itself does not supply or pin a specific release URL or checksum.
Credentials
The skill declares no required env vars or local credentials. Authentication is delegated to Membrane (browser-based login and server-side credential management), which is proportional to the integration. Users should be aware that using Membrane means delegating Vimeo credentials/refresh handling to the Membrane service.
Persistence & Privilege
The skill is not always-enabled, is user-invocable, and does not request elevated platform privileges or modify other skills/settings. Autonomous invocation is allowed by platform default but is not combined here with other concerning privileges.
Assessment
This skill appears to do what it claims: it uses the Membrane CLI to manage Vimeo resources. Before installing or using it: (1) verify the @membranehq/cli package and publisher on npm and only install from the official source; (2) understand that logging in delegates Vimeo access to the Membrane service — review Membrane's privacy/security policies and the permissions you grant (especially because actions can delete or modify videos); (3) be cautious when running actions that change or delete content and prefer read-only discovery first; (4) avoid entering private API keys in chat — the skill explicitly advises against local keys and relies on Membrane for auth.Like a lobster shell, security has layers — review code before you run it.
latestvk97edk8cfkaehw3mpt5yqbwh8x8431rs
License
MIT-0
Free to use, modify, and redistribute. No attribution required.