Finicity
v1.0.2Finicity integration. Manage data, records, and automate workflows. Use when the user wants to interact with Finicity data.
⭐ 0· 93·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Finicity integration) match the instructions: everything is about using Membrane to connect to Finicity and run actions or proxied requests. No unrelated credentials, binaries, or capabilities are requested.
Instruction Scope
SKILL.md only instructs installing and using the Membrane CLI (login, connect, action list/run, and proxy requests). It does not ask the agent to read unrelated files, access unrelated env vars, or transmit data to unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only). The doc tells the user to install @membranehq/cli globally via npm, which is expected for this integration but carries the normal npm/global-install supply-chain and privilege considerations.
Credentials
The skill declares no required env vars or credentials and explicitly advises not to ask the user for API keys (Membrane handles auth). The only external requirement is a Membrane account and network access, which are proportional to the stated purpose.
Persistence & Privilege
The skill is not always-enabled and is user-invocable; it does not request persistent privileges, nor does it instruct modifying other skills or system-wide settings.
Assessment
This skill is an instruction-only guide for using the Membrane CLI to access Finicity via Membrane's proxy. Before installing or running: (1) verify you trust Membrane/@membranehq on npm (supply-chain risk with npm packages), (2) be comfortable authenticating via your browser to a Membrane account, and (3) avoid entering Finicity API keys locally (the guide rightly delegates that to Membrane). If you need higher assurance, review the @membranehq/cli package source and releases or use an account / environment you control.Like a lobster shell, security has layers — review code before you run it.
latestvk97b80navqm7v3q995c5zscn5d842dzt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
