Funding Options
v1.0.2Funding Options integration. Manage data, records, and automate workflows. Use when the user wants to interact with Funding Options data.
⭐ 0· 78·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description match the runtime instructions: the skill tells the agent to use the Membrane CLI to connect to Funding Options, list actions, run actions, and proxy raw API requests. No unrelated services, credentials, or capabilities are requested.
Instruction Scope
SKILL.md stays within the Funding Options use case (discovering and running actions, proxying API calls through Membrane). It does not tell the agent to read arbitrary local files or exfiltrate unrelated data. Minor inconsistency: the skill declares no required binaries but the instructions expect npm/node (npm install -g and npx) and the 'membrane' CLI to be available.
Install Mechanism
There is no install spec in the registry (instruction-only), but the README recommends installing @membranehq/cli via npm (global install) or using npx. Installing packages from the public npm registry is a normal choice for a CLI but has moderate risk (postinstall scripts, supply-chain concerns). Recommend verifying package source and using npx or pinned versions when possible.
Credentials
The skill requests no environment variables or local credentials. It explicitly delegates auth to Membrane (the user authenticates via membrane login/browser), which is proportionate to the stated purpose. No unrelated secrets are requested.
Persistence & Privilege
always is false and there is no install-time code or files written by the skill itself (instruction-only). The skill does not request permanent platform-level privileges or configs. Autonomous invocation is allowed (platform default) but not combined with other red flags.
Assessment
This skill appears to do what it says: it instructs the agent to use the Membrane CLI to operate on Funding Options. Before installing or following its instructions: (1) be aware the README expects npm/node and the membrane CLI even though requirements don't list them—installing the CLI globally runs code from the npm registry, so prefer using npx or pin a specific package version; (2) verify @membranehq/cli comes from the official Membrane project (homepage/repo links are provided) and inspect the package if you are cautious; (3) expect a browser-based OAuth flow for authentication—do not enter unrelated API keys or secrets when prompted; (4) if you need autonomous agent use, remember the platform default allows the skill to be invoked automatically, but this skill does not request elevated or persistent privileges. If you want higher assurance, ask the publisher for an explicit list of required tooling (node/npm) and a pinned CLI version or a signed release to avoid installing arbitrary latest code.Like a lobster shell, security has layers — review code before you run it.
latestvk97fj2whcd3tgjdpxw17sjnx3d842vky
License
MIT-0
Free to use, modify, and redistribute. No attribution required.