Finapi
v1.0.2FinAPI integration. Manage data, records, and automate workflows. Use when the user wants to interact with FinAPI data.
⭐ 0· 95·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is an integration helper for FinAPI and its instructions consistently describe using Membrane to manage FinAPI connections and actions. However, the registry metadata lists no required binaries while the SKILL.md requires the @membranehq/cli to be available — this is an omission in metadata rather than a functional mismatch.
Instruction Scope
SKILL.md only directs the agent to use the Membrane CLI to search, connect, list actions, run actions, and proxy requests to FinAPI. It does not instruct reading local files, unrelated env vars, or transmitting data to unexpected endpoints. OAuth/browser login flow is expected for connector auth.
Install Mechanism
The instructions tell users to install the Membrane CLI via npm install -g @membranehq/cli (a public npm package). The registry has no install spec; installation is left to the user. Installing a global npm CLI is a moderate-risk action but expected for a CLI-based integration; consider preferring npx or pinning a version.
Credentials
The skill requests no environment variables or credentials in metadata and explicitly recommends letting Membrane handle credentials via connector/OAuth. That is proportional to its purpose.
Persistence & Privilege
The skill is not marked always: true and does not request persistent system changes. It instructs the user to install a CLI but does not request elevated runtime privileges or modify other skills.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to manage FinAPI connectors and actions. Before installing/using it: (1) verify you trust the Membrane project and the npm package @membranehq/cli (check publisher, package page, and release history); (2) prefer using npx @membranehq/cli@<version> or pin a specific version instead of a global install if you want less system-wide change; (3) run the CLI installation in an isolated environment if you have concerns; (4) be aware authentication uses an OAuth/browser flow — do not paste API keys into the skill; and (5) note the registry metadata omitted the CLI requirement, so ensure the Membrane CLI is installed before using the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk978p2dzwgd8fa9tnmd76smpjh843znb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.