Faspay
v1.0.2Faspay integration. Manage data, records, and automate workflows. Use when the user wants to interact with Faspay data.
⭐ 0· 97·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Faspay integration) match the instructions: the SKILL.md only describes using Membrane to connect to Faspay, discover actions, run actions, or proxy API requests. Nothing requested is unrelated to payment gateway integration.
Instruction Scope
Instructions are narrowly scoped to installing and using the Membrane CLI, creating connections, listing and running actions, and proxying requests to Faspay. They do not ask the agent to read arbitrary local files, harvest unrelated environment variables, or exfiltrate data to unexpected endpoints.
Install Mechanism
The SKILL.md instructs users to install @membranehq/cli via npm (-g). This is an expected, moderate-risk mechanism for a CLI-driven integration, but global npm installs modify the host environment — users should verify the package source and avoid running as root if concerned.
Credentials
The skill declares no required env vars, credentials, or config paths. Runtime instructions rely on a Membrane account and browser-based login handled by Membrane (no local API keys requested), which is proportionate to the described functionality.
Persistence & Privilege
No special persistence is requested (always: false). The skill does not request to modify other skills or system-wide agent settings. Autonomous invocation is allowed (platform default) but is not combined with broad credentials or always:true.
Assessment
This skill is instruction-only and uses the Membrane CLI to talk to Faspay. Before installing or running it: (1) confirm you trust Membrane (@membranehq on npm and the getmembrane.com site); (2) inspect the npm package source (GitHub repo) before running a global npm install; (3) avoid running installs as root and consider using an isolated environment (container or VM) if you are cautious; (4) expect the CLI to open a browser-based login — do not paste secrets into chat; (5) the skill will cause network requests to Faspay via Membrane, so only use with accounts you trust. If you need higher assurance, request the upstream repository or an official maintainer statement linking the npm package to the displayed homepage.Like a lobster shell, security has layers — review code before you run it.
latestvk9787zqx3w81q6crs7cszafz41842ysk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.