Uservoice

UserVoice integration. Manage data, records, and automate workflows. Use when the user wants to interact with UserVoice data.

This skill appears coherent: it integrates UserVoice via the Membrane CLI. Before installing or using it, consider: 1) you will need to install a third‑party npm CLI globally (npm install -g @membranehq/cli@latest) — verify the package and repo and be aware global installs may need elevated privileges; 2) you must create/log into a Membrane account and perform OAuth-style sign‑in — Membrane will mediate API calls and may see/proxy your UserVoice data, so review Membrane’s privacy and security docs; 3) the skill does not request local API keys or env vars, which is good; 4) if you are uncomfortable with a third party mediating access, use a different integration path or review Membrane’s source and permissions first. If you want a tighter assessment, provide the Membrane CLI package URL or repository code to inspect what the CLI does after install.

Type: OpenClaw Skill Name: uservoice Version: 1.0.1 The skill bundle functions as a wrapper for the Membrane CLI, instructing the agent to perform high-privilege operations such as global package installation (`npm install -g @membranehq/cli`) and CLI-based authentication. While these actions are aligned with the stated purpose of integrating UserVoice via the Membrane platform, the requirement for shell execution, global system modification, and reliance on a third-party service for dynamic code generation/execution (`membrane action create`) represents a significant security surface. No evidence of intentional malice or data exfiltration was found in SKILL.md or _meta.json, but the high-risk capabilities warrant a suspicious classification.