Gopay
v1.0.0GoPay integration. Manage data, records, and automate workflows. Use when the user wants to interact with GoPay data.
⭐ 0· 53·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name and description claim GoPay integration and all runtime instructions are limited to using the Membrane CLI and Membrane-hosted connections for GoPay. There are no unrelated environment variables, binaries, or configuration paths requested that would be disproportionate to a GoPay connector.
Instruction Scope
SKILL.md only instructs use of membrane CLI commands (login, search/connect, action list/run, proxy requests). It does not instruct reading arbitrary files, requiring unrelated credentials, or exfiltrating data to third-party endpoints. The login flow uses a browser-based auth or headless copy/paste flow, which is expected for connector-based auth.
Install Mechanism
There is no embedded install spec (instruction-only). The doc recommends installing the @membranehq/cli via `npm install -g`, which is reasonable for a CLI but does execute code from the npm registry and creates a global binary. This is expected but you should verify the package source and trustworthiness before installing globally.
Credentials
The skill declares no required environment variables, no primary credential, and relies on Membrane to manage credentials server-side. This is proportionate to a connector-style integration; there are no requests for unrelated secrets or system credentials.
Persistence & Privilege
The skill is not always-enabled and uses normal agent invocation. It does not request system-wide configuration changes or access to other skills' credentials. No elevated persistence or privilege is requested.
Assessment
This skill is instruction-only and appears coherent: it directs you to use the Membrane CLI to manage GoPay connections, which is consistent with its purpose. Before installing: (1) verify the @membranehq/cli package on the npm registry and review its GitHub repo to ensure you trust the publisher; (2) consider installing the CLI without -g or in a controlled environment if you prefer not to add global binaries; (3) confirm you are comfortable giving Membrane (their service/account) the ability to manage GoPay credentials, since the skill relies on Membrane server-side auth and proxying; (4) check Membrane's privacy/terms and the connector's permissions if processing sensitive payment data. If you need higher assurance, request the skill author to provide the exact npm package version and a link to the repository/source code for review.Like a lobster shell, security has layers — review code before you run it.
latestvk97b6cyfhy6k6hncmbsh7ft08184cpz1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.