Findity
v1.0.2Findity integration. Manage data, records, and automate workflows. Use when the user wants to interact with Findity data.
⭐ 0· 95·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (Findity integration) match the runtime instructions: all actions are performed via the Membrane CLI which proxies to the Findity API. However the skill's registry metadata lists no required binaries or install steps despite the SKILL.md explicitly telling users/agents to install and run the Membrane CLI (npm/npx).
Instruction Scope
SKILL.md stays on-topic: it instructs using membrane login/connect/action/request to manage Findity data and explicitly warns not to collect API keys. It does require network access and browser-based auth flows (or headless URL copy), which is consistent with the described integration.
Install Mechanism
This is an instruction-only skill (no install spec in registry), but the README tells users to run npm install -g @membranehq/cli and sometimes npx @membranehq/cli@latest. Installing a global npm package or using npx will pull code from the npm registry at runtime; that is normal for CLI usage but is not reflected in the skill's declared install requirements.
Credentials
The skill declares no environment variables or credentials and the instructions state Membrane handles auth server-side (do not ask for user API keys). There are no requests for unrelated credentials or config paths.
Persistence & Privilege
The skill does not request always:true or other elevated persistence. It does rely on the Membrane service for auth and proxying, but it does not modify other skills or system-wide settings.
Assessment
This skill appears to do what it says: it relies on the Membrane CLI to talk to Findity and does not ask for direct API keys. Before installing or running it: (1) verify you trust the @membranehq/cli npm package (check the package page, publisher, and repo), (2) be aware you'll perform a browser-based login that grants Membrane access to your Findity account, (3) prefer running the CLI in a controlled environment or sandbox if you have high security requirements, and (4) consider asking the skill author to update the registry metadata to declare 'membrane' or 'npm' as required binaries/install steps so the capabilities are explicit.Like a lobster shell, security has layers — review code before you run it.
latestvk974ac7qbdwg9t253hxwxw582n843z0s
License
MIT-0
Free to use, modify, and redistribute. No attribution required.