Fenergo
v1.0.2Fenergo integration. Manage data, records, and automate workflows. Use when the user wants to interact with Fenergo data.
⭐ 0· 95·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Fenergo integration) matches the runtime instructions: all actions are expressed as Membrane CLI operations against Fenergo connectors and APIs. Nothing in the SKILL.md requests unrelated credentials, tools, or system access.
Instruction Scope
Instructions tell the user/agent to install and run the @membranehq/cli, perform `membrane login` (browser-based auth), create/connect connectors, run actions, and optionally proxy arbitrary requests to the Fenergo API via Membrane. This is expected for a proxy-based integration, but it means user data and API calls are routed through Membrane's service — users should be aware that requests and data will leave their system to a third party.
Install Mechanism
There is no automated install spec in the registry metadata; the SKILL.md instructs manual installation via `npm install -g @membranehq/cli` (and uses `npx` in examples). Installing a published npm CLI is a reasonable, common mechanism but carries the usual risks of installing third-party global packages; this is moderate-risk but proportionate to the described functionality.
Credentials
The skill declares no required environment variables or local secrets. The documentation explicitly says Membrane manages credentials server-side and advises not to ask users for API keys, which is consistent and proportionate.
Persistence & Privilege
Skill does not request always:true, does not install code or change other skills, and has default autonomous invocation settings. There is no request for elevated or persistent system privileges beyond the normal act of installing/running a CLI.
Scan Findings in Context
[no_regex_findings] expected: The skill is instruction-only (SKILL.md) with no code files for the regex scanner to analyze; absence of findings is expected and not evidence of safety.
Assessment
This skill appears coherent for connecting to Fenergo via Membrane, but be aware of two practical points before installing: (1) it asks you to install and run the @membranehq CLI (global npm install) — only install packages you trust and prefer installing global CLIs in controlled environments; (2) API calls and credentials are proxied through Membrane, so Fenergo data and requests will traverse a third party — review Membrane's privacy/security posture and only connect accounts you are comfortable delegating. Also note the CLI uses browser-based auth (opens a URL/relies on copied codes), so headless environments require manual steps. If you need higher assurance, verify the @membranehq/cli package on the npm registry and the referenced GitHub repo before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk971rxk2y67cvv6w9y7tr87rgn843a09
License
MIT-0
Free to use, modify, and redistribute. No attribution required.