Coinapi
v1.0.2CoinAPI integration. Manage data, records, and automate workflows. Use when the user wants to interact with CoinAPI data.
⭐ 0· 47·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description say 'CoinAPI integration' and the SKILL.md exclusively documents using the Membrane CLI to create connections, run actions, and proxy requests to CoinAPI. No unrelated credentials, binaries, or system paths are requested.
Instruction Scope
The instructions focus on installing/using the Membrane CLI, logging in, creating/using a connector to CoinAPI, listing/running actions, and proxying requests. They do not instruct reading arbitrary local files, other environment variables, or exfiltrating data to unexpected endpoints. A browser-based login and headless completion flow are required (explained in the doc).
Install Mechanism
The SKILL.md recommends installing @membranehq/cli globally via npm (npm install -g). This is a typical but higher-risk install mechanism than 'instruction-only' because npm packages may run install scripts — verify the package's publisher and repository before installing, or use npx to avoid global installation.
Credentials
The skill declares no required env vars or local credentials. It explicitly instructs to let Membrane manage API keys server-side, which is proportionate for a connector-based integration. Note: a Membrane account is required and the CLI will prompt for interactive authentication.
Persistence & Privilege
No special persistence is requested (always is false). The skill does not request system-wide configuration changes or other skills' credentials. Autonomous invocation is allowed by default on the platform but is not combined with other red flags here.
Assessment
This skill is coherent: it uses the Membrane CLI to talk to CoinAPI and does not ask for unrelated secrets. Before installing, verify the @membranehq/cli npm package and its GitHub repository/maintainer, prefer using npx when possible to avoid a global install, and be aware you'll authenticate via a browser (or a headless flow). Also consider whether you trust Membrane to hold your CoinAPI credentials server-side before creating a connection.Like a lobster shell, security has layers — review code before you run it.
latestvk9737h263dkcptk97f73yhed81842vts
License
MIT-0
Free to use, modify, and redistribute. No attribution required.