Dialogflow Cx Nlu
v1.0.0Manage intents and entity types in Google Dialogflow CX via REST API. Use for creating, updating, and managing natural language understanding components. Sup...
⭐ 0· 265·0 current·0 all-time
byYash Kavaiya@yash-kavaiya
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description match the provided code and docs: the SKILL.md and scripts/nlu.py implement listing, creating, updating, and deleting intents and entity types via Dialogflow CX APIs. Requesting Google Cloud credentials (gcloud access token or service account) is appropriate for this functionality. However, the registry metadata lists no required environment variables or primary credential even though the runtime instructions explicitly rely on Google authentication (gcloud token or GOOGLE_APPLICATION_CREDENTIALS).
Instruction Scope
SKILL.md gives concrete curl examples and a CLI usage for scripts/nlu.py that operate only against Dialogflow endpoints and local credential mechanisms (gcloud / service account file). The instructions do not ask the agent to read unrelated system files, send data to third-party endpoints, or perform other out-of-scope actions.
Install Mechanism
There is no install spec (instruction-only), and the included Python script simply recommends installing published packages (google-cloud-dialogflow-cx, google-auth) via pip. No remote downloads from untrusted URLs or archive extraction are present.
Credentials
The runtime legitimately requires Google Cloud credentials (gcloud access token or a service account JSON referenced by GOOGLE_APPLICATION_CREDENTIALS). Those credential requirements are proportional to the skill's purpose, but the skill metadata does not declare any required env vars or a primary credential—this mismatch could cause users to miss the fact that they must provide sensitive Google credentials and the required IAM permissions.
Persistence & Privilege
The skill does not request always: true, does not persist or modify other skills or system-wide settings, and has no install-time privileged operations. It runs as a user-invocable CLI and/or via the provided clients using the caller's Google credentials.
Assessment
This skill appears to do what it says — manage Dialogflow CX resources — and the included Python script uses the official google-cloud client libraries. Before installing or running it: 1) Be prepared to provide Google Cloud credentials (gcloud-authenticated access token or a service-account JSON) and grant the service account appropriate Dialogflow IAM roles only (least privilege). 2) Note the registry metadata does not declare these required credentials, so don't assume it will configure or request them automatically. 3) Inspect and run the script in a controlled environment (not with broad or production credentials) the first time to confirm behavior. 4) Ensure you trust the skill source before giving it access to any service-account JSON or long-lived tokens.Like a lobster shell, security has layers — review code before you run it.
latestvk976xr1tk49kbp3e6fe8tm7915823sk6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.