Google Cloud Dataflow
v1.0.0Google Cloud Dataflow integration. Manage data, records, and automate workflows. Use when the user wants to interact with Google Cloud Dataflow data.
⭐ 0· 7·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The SKILL.md describes a Google Cloud Dataflow integration and consistently uses the Membrane CLI to implement that. However, the registry metadata lists no required binaries or credentials even though the instructions require installing @membranehq/cli and a Membrane account; the missing declaration is an inconsistency in metadata (not necessarily malicious, but worth noting).
Instruction Scope
All runtime instructions are limited to installing/using the Membrane CLI, creating connections, listing actions, running actions, and proxying HTTP requests to the Dataflow API via Membrane. The instructions do not ask the agent to read unrelated files, environment variables, or local secrets. They do, however, explicitly route API calls and credentials through Membrane's service, which means pipeline data and tokens will be handled by Membrane.
Install Mechanism
There is no platform install spec in the registry; the SKILL.md instructs the user to run `npm install -g @membranehq/cli` (and shows npx usage). Global npm installs and npx use are common but carry normal npm-package risks (unvetted code, supply-chain issues). The instruction does not pin a package version and relies on the public npm registry and the @membranehq namespace.
Credentials
The skill declares no required environment variables or credentials, and the instructions indicate credentials are managed by Membrane via browser-based auth flows. This is proportionate to the stated purpose; however, it does require trusting Membrane to store and handle your Google Cloud/Dataflow credentials and requests.
Persistence & Privilege
The skill is instruction-only, has no install-time automation in the registry, and does not request 'always' or other elevated persistent privileges. It does not modify other skills or system-wide settings according to the provided materials.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to interact with Google Cloud Dataflow. Before installing or using it, consider: (1) Metadata omission — the registry did not declare the Membrane CLI requirement even though SKILL.md requires it; verify you are comfortable installing @membranehq/cli. (2) Trust and privacy — Membrane acts as a proxy and will handle/hold credentials and request data for Dataflow actions; review Membrane's privacy/security docs and your org policy before sending sensitive data through their service. (3) npm risks — prefer using npx with a pinned version or inspect the package on the npm registry and its GitHub repo before a global install. (4) Authentication flow — the skill uses browser-based login; do not paste or share raw cloud credentials into prompts. If you need stronger assurance, ask the skill author to add explicit registry metadata for required binaries and to pin CLI versions or provide an install spec from a verifiable source.Like a lobster shell, security has layers — review code before you run it.
latestvk9727fhdpmkypjzb3nc7k54g3984hdws
License
MIT-0
Free to use, modify, and redistribute. No attribution required.