Openbb
v1.0.2OpenBB 🦋 integration. Manage data, records, and automate workflows. Use when the user wants to interact with OpenBB 🦋 data.
⭐ 0· 108·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (OpenBB integration) align with the instructions: all steps revolve around using the Membrane CLI to connect to OpenBB and run actions. There are no unrelated credential requests, binaries, or config paths.
Instruction Scope
SKILL.md stays on topic: it tells the agent how to install and use the Membrane CLI, create connections, list actions, run actions, and proxy API requests. It does not instruct the agent to read arbitrary files, harvest unrelated environment variables, or transmit data to unexpected endpoints. It does require network access and a Membrane account, which is appropriate for the stated functionality.
Install Mechanism
No install spec in the package; the runtime instructions tell the user to install @membranehq/cli via npm -g. Using a public npm package is expected for a CLI but carries the normal trust risks of global npm installs—verify the package and publisher (@membranehq) before installing.
Credentials
The skill declares no required environment variables, credentials, or config paths. The instructions explicitly advise letting Membrane manage credentials and not asking users for API keys, which is consistent and proportionate.
Persistence & Privilege
The skill is instruction-only, has no install-time persistence, and does not request always:true or elevated privileges. It is user-invocable and can be called autonomously by the agent (platform default), which is appropriate for a connector skill.
Assessment
This skill is coherent but relies on the third-party Membrane service and an npm package. Before installing or using it: (1) verify the @membranehq/cli package and its maintainer on npm/GitHub; (2) review Membrane's privacy and security practices because authentication is handled server-side (your OpenBB credentials or OAuth tokens will be proxied by Membrane); (3) avoid global npm installs if you prefer less system-wide impact—consider installing the CLI in a virtual environment or using npx; and (4) review the actions/permissions created in Membrane after connecting to limit access to only what you need.Like a lobster shell, security has layers — review code before you run it.
latestvk97ar2gwmt2atb5yvecpywsq4d843f2s
License
MIT-0
Free to use, modify, and redistribute. No attribution required.