Judopay
v1.0.2Judopay integration. Manage data, records, and automate workflows. Use when the user wants to interact with Judopay data.
⭐ 0· 118·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, README text, and commands all describe a Judopay integration via Membrane. Required capabilities (network access, Membrane account, Membrane CLI) are coherent with the stated purpose and there are no unrelated credential or binary requirements.
Instruction Scope
SKILL.md confines actions to installing/using the Membrane CLI, creating/listing Membrane connections, running Membrane actions, and proxying requests to Judopay. It does not instruct reading local secrets, system files, or unrelated configuration, nor does it direct data to unexpected external endpoints beyond Membrane/Judopay.
Install Mechanism
There is no platform install spec, but the instructions tell the user to run `npm install -g @membranehq/cli` (or use npx). Installing a global npm CLI is reasonable for this integration but is a user-side action that pulls code from the public npm registry (moderate trust requirement).
Credentials
The skill declares no required env vars or config paths and the instructions explicitly advise against asking users for API keys (Membrane handles auth). The requested permissions are proportional to the task (network + Membrane account).
Persistence & Privilege
The skill is not always-enabled and is user-invocable. Autonomous model invocation is allowed (platform default) but the skill does not request elevated or persistent system privileges or modify other skills' config.
Assessment
This skill appears coherent: it expects you to use the Membrane CLI and a Membrane account to manage Judopay connections. Before installing, verify that @membranehq/cli on npm and the Membrane service (getmembrane.com / their GitHub) are trusted by your organization. Installing the global npm CLI will run code from the npm registry—review the package and its maintainers if you need stronger assurance. Note that Membrane will handle Judopay credentials server-side, so you should not need to provide raw API keys to the agent. If you require higher assurance, test actions in a sandboxed environment and review Membrane's privacy/security docs and the npm package source before granting the agent access.Like a lobster shell, security has layers — review code before you run it.
latestvk97ffx16ea7thy00dedp454r85843041
License
MIT-0
Free to use, modify, and redistribute. No attribution required.