Formance
v1.0.0Formance integration. Manage data, records, and automate workflows. Use when the user wants to interact with Formance data.
⭐ 0· 52·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The skill is described as a Formance integration and its SKILL.md consistently instructs use of the Membrane CLI to discover connectors, create connections, run actions, and proxy requests to Formance. The declared homepage and repository point to Membrane-related projects which matches the implementation approach.
Instruction Scope
Runtime instructions are narrowly scoped to installing and using the Membrane CLI, authenticating, listing connectors/actions, running actions, and proxying requests. The instructions do not ask the agent to read unrelated files, exfiltrate environment variables, or perform system-wide actions outside the stated purpose.
Install Mechanism
There is no formal install spec in the skill bundle; the SKILL.md instructs the user to install @membranehq/cli via npm (global). Installing a global npm package is a normal way to obtain the CLI but does carry the usual npm risks (postinstall scripts, supply-chain trust). The skill itself does not perform or automate the install.
Credentials
The skill requests no environment variables or credentials and explicitly instructs to let Membrane handle credentials server-side rather than asking users for API keys. Requiring a Membrane account and network access is appropriate for this integration.
Persistence & Privilege
The skill does not request persistent or elevated platform privileges (always is false), does not modify other skills' configs, and is user-invocable. Autonomous invocation is allowed (platform default) but not combined with other red flags.
Assessment
This skill is coherent with its stated purpose, but before installing or following its instructions consider: (1) trust and verify the @membranehq/cli package and its publisher on npm/GitHub because installing global npm packages can run code on your machine; (2) prefer using npx or a local install for testing instead of a global install to reduce long-term footprint; (3) test against a non-production Membrane/Formance account first so you can confirm behavior and permissions; (4) review Membrane's privacy/security docs to understand what data is proxied or stored server-side; and (5) inspect the package source (GitHub repo) if you need stronger assurance of what the CLI does.Like a lobster shell, security has layers — review code before you run it.
latestvk974ytzyh68ggx43149rdm9z5d84aaxz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.