Advanced Web Ranking
v1.0.0Advanced Web Ranking integration. Manage data, records, and automate workflows. Use when the user wants to interact with Advanced Web Ranking data.
⭐ 0· 95·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name and description match the instructions: it integrates Advanced Web Ranking via Membrane. However, the package metadata declares no required binaries or primary credential while the SKILL.md explicitly requires a Membrane account and the Membrane CLI. That mismatch is likely an oversight but should be corrected.
Instruction Scope
SKILL.md limits actions to installing/using the Membrane CLI, creating connections, listing actions, running actions, and optionally proxying requests to the Advanced Web Ranking API via Membrane. There are no instructions to read unrelated files or environment variables. The proxying behavior means data/requests will flow to Membrane and Advanced Web Ranking—this is expected for this integration.
Install Mechanism
The skill bundle contains no install spec, but the instructions tell the user to run `npm install -g @membranehq/cli` (and suggest `npx` for some commands). Installing a public npm CLI is a common pattern but has moderate risk (it writes code to disk and runs binaries). The absence of an explicit install spec in the skill metadata is an inconsistency worth calling out.
Credentials
The skill does not request environment variables or unrelated credentials. It relies on a Membrane account for authentication (browser-based OAuth flows) and instructs not to ask users for API keys. The data exchanged will be proxied through Membrane—users should be aware that their Advanced Web Ranking data and API calls are transmitted to Membrane's service.
Persistence & Privilege
The skill does not request persistent system privileges, does not set always:true, and contains no install-time scripts in the bundle. Runtime behavior depends on the Membrane CLI the user installs; autonomous invocation is allowed (default) but not an unusual privilege here.
Assessment
This skill appears to be a straightforward connector that uses the Membrane CLI to talk to Advanced Web Ranking. Before installing or using it: (1) confirm you trust Membrane (getmembrane.com) because calls and data will be proxied through their service; (2) be prepared to run a browser-based login (or headless flow) to authorize access; (3) prefer using `npx @membranehq/cli@latest` if you want to avoid a global npm install, and review the npm package page for @membranehq/cli before installing; (4) note the metadata omissions — the skill should declare the Membrane CLI as a required binary and mention the Membrane account requirement in the manifest; (5) avoid pasting unrelated secrets into the CLI prompts and review the connector permissions in Membrane after you connect. If you need higher assurance, ask the publisher for an install spec and a clear list of what data the connector will send to Membrane.Like a lobster shell, security has layers — review code before you run it.
latestvk979m663gbyz1bem0kse6mxqhn84gnea
License
MIT-0
Free to use, modify, and redistribute. No attribution required.