Cashfree
v1.0.0Cashfree integration. Manage data, records, and automate workflows. Use when the user wants to interact with Cashfree data.
⭐ 0· 40·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to integrate with Cashfree and all runtime instructions use the Membrane CLI to connect and proxy requests to Cashfree — this is consistent with the stated purpose. However, SKILL.md tells the user to install Node/npm (npm install -g @membranehq/cli and npx usage) while the registry metadata declares no required binaries; that mismatch should be corrected or documented.
Instruction Scope
Instructions are scoped to using the Membrane CLI to discover actions, run actions, and proxy requests to the Cashfree API. They do not instruct reading unrelated files or environment variables, nor do they ask for user API keys (they explicitly recommend creating a Membrane connection instead).
Install Mechanism
There is no formal install spec in the registry, but SKILL.md instructs installing the Membrane CLI via npm (global) and suggests using npx. Installing an npm package from the public registry is traceable and common, but it does execute code on the host and is a higher-risk install mechanism than instruction-only. The skill should declare the Node/npm dependency in metadata.
Credentials
The skill requests no environment variables or credentials from the registry metadata. The runtime relies on the Membrane login flow (browser-based OAuth) to obtain access and does not ask for Cashfree API keys in instructions, which is proportionate. It does require network access and a Membrane account.
Persistence & Privilege
The skill is not marked always:true and does not request system-wide configuration changes. Autonomous invocation is allowed (default), but this is not combined with broad credential requests or elevated persistence, so no additional concern from privilege or persistence settings.
Assessment
This skill appears to be what it says: a Cashfree integration that uses the Membrane CLI. Before installing, be aware it requires network access and a Membrane account and the SKILL.md expects Node/npm (installing an npm package globally). Verify the @membranehq/cli package and the Membrane project (getmembrane.com / github.com/membranedev) yourself, and prefer to connect test or limited-privilege Cashfree accounts when first trying it. Because the agent can invoke the skill automatically (platform default), consider whether you want the agent to have access to your connected account(s) without confirmation. Finally, ask the publisher/maintainer to: (1) declare Node/npm as a required binary in metadata, and (2) include an explicit install spec or a hosted release link if you need a non-npm install option.Like a lobster shell, security has layers — review code before you run it.
latestvk97b814wb20f4xjgher7618b9184et9e
License
MIT-0
Free to use, modify, and redistribute. No attribution required.