Paymill
v1.0.0PAYMILL integration. Manage data, records, and automate workflows. Use when the user wants to interact with PAYMILL data.
⭐ 0· 44·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (PAYMILL integration) match the SKILL.md instructions (use Membrane CLI to connect to PAYMILL). Minor inconsistency: registry metadata states 'Required binaries: none' but the runtime instructions explicitly require the 'membrane' CLI (installable via npm). Otherwise the capability and requested actions are proportional to the stated purpose.
Instruction Scope
SKILL.md contains only CLI usage for Membrane: install CLI, login, create/list connections, run actions, and proxy requests. It does not instruct the agent to read unrelated files, access unrelated environment variables, or exfiltrate data to unexpected endpoints. It relies on Membrane to handle authentication, which is consistent with the instructions.
Install Mechanism
There is no automated install spec in the registry (instruction-only). The doc instructs users to run 'npm install -g @membranehq/cli' or use 'npx ...' — a normal approach but moderate risk because it pulls code from the npm registry. This is expected for a CLI-based integration, but users should verify the npm package and publisher before installing globally.
Credentials
The skill declares no required env vars and explicitly advises not to ask users for API keys, delegating credential management to Membrane. That is proportionate: the integration needs network access and a Membrane account, but does not request unrelated secrets or system paths.
Persistence & Privilege
Skill is not always-enabled, is user-invocable, and allows normal autonomous invocation. It does not request system-wide config changes or access to other skills' credentials. No elevated persistence or cross-skill privileges are requested.
Assessment
This skill is an instruction-only adapter that expects you to install and use the Membrane CLI; before installing, confirm you trust the @membranehq npm package and the Membrane service (they will proxy requests and handle your Paymill credentials). Paymill is noted as defunct — functionality may be limited. Because installation is manual, review the npm package publisher, avoid pasting unrelated secrets into chat, and be aware that any data sent through Membrane will be visible to that service. If you need stricter control, run the CLI in an isolated environment or review Membrane's privacy/security docs first.Like a lobster shell, security has layers — review code before you run it.
latestvk97e5gq6jdg66qmqt26yt668g184dz9e
License
MIT-0
Free to use, modify, and redistribute. No attribution required.