Altera Payroll
v1.0.2Altera Payroll integration. Manage data, records, and automate workflows. Use when the user wants to interact with Altera Payroll data.
⭐ 0· 123·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with Altera Payroll and all runtime instructions are about installing and using the Membrane CLI to discover connectors, create a connection, run actions, or proxy API requests — which matches the stated purpose.
Instruction Scope
SKILL.md confines agent behavior to installing/using membrane CLI, logging in, creating connections, listing/running actions, and proxying requests. It does not instruct reading unrelated files, environment variables, or sending data to endpoints outside the Membrane flow. Note: proxying means Membrane's service will receive the API traffic (expected for this integration).
Install Mechanism
Installation is via npm (npm install -g @membranehq/cli) and the docs also reference npx usage. npm is a standard package source (moderate risk compared to direct downloads). Consider using npx to avoid a global install or review the package before installing.
Credentials
The skill declares no required environment variables or local secrets; authentication is delegated to Membrane's login flow. This is proportionate for a connector-based integration. Be aware credentials will be managed/stored by Membrane (server-side).
Persistence & Privilege
The skill is not always:true and requests no system-wide config changes. It uses normal autonomous invocation defaults (disable-model-invocation is false), which is expected for skills and not a concern by itself.
Assessment
This skill is coherent but you should still exercise normal caution before installing/using it: 1) Review the @membranehq/cli package (npm page and GitHub) to ensure you trust the publisher. 2) Prefer running commands with npx (or inspect the package) instead of a global npm install to reduce system impact. 3) Understand that Membrane will proxy payroll API traffic and hold credentials — confirm Membrane's privacy, security, and compliance posture before connecting sensitive payroll data. 4) Use a test or least-privilege account initially and confirm actions/permissions before using in production. 5) If your organization restricts installs or external SaaS proxies, get approval from your security/compliance team.Like a lobster shell, security has layers — review code before you run it.
latestvk975zq7cm5tqxkpet9xn6scm418432c4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.