Google Directory

This skill appears to do what it says (use Membrane to talk to Google Directory), but there are a few practical risks to weigh before installing or running it: - The instructions run npx @membranehq/cli@latest, which downloads and executes the latest code from npm each time. Consider pinning to a specific package version (not @latest) or reviewing the package source before use to reduce risk. - Logging in writes credentials to ~/.membrane/credentials.json. Expect local credential files and ensure you trust where those credentials are stored and who can read them on the host. - The skill proxies arbitrary requests through Membrane (you can pass full URLs). That is useful but means the CLI can be used to send arbitrary data through a third-party service — ensure you trust Membrane's privacy/security model and avoid sending sensitive data unless you understand where it goes. - The registry listing has no source or homepage; verify the Membrane CLI package and the skill owner before using in production environments. If you plan to use this skill: verify the @membranehq/cli npm package (source repository, maintainers), prefer a pinned version, and consider testing in an isolated environment first. If you need higher assurance, ask the skill author for a homepage/source link and for the registry metadata to declare the ~/.membrane/credentials.json path explicitly.