Recurly
v1.0.2Recurly integration. Manage data, records, and automate workflows. Use when the user wants to interact with Recurly data.
⭐ 0· 55·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill says it integrates with Recurly and all instructions focus on using the Membrane CLI to discover actions, create connections, and proxy Recurly API calls — these requirements are proportional to a Recurly integration.
Instruction Scope
SKILL.md instructs the agent to install and run Membrane CLI commands, create connections via browser-based auth, list actions, run actions, and proxy requests. It does not instruct reading unrelated files, environment variables, or sending data to unexpected endpoints.
Install Mechanism
This is an instruction-only skill (no install spec). The README asks the user to install @membranehq/cli globally via npm (or use npx). Installing a third-party CLI is a normal step but carries the usual supply-chain risk of any npm package; the SKILL.md references the official @membranehq package and public docs.
Credentials
The skill declares no required env vars or credentials and explicitly instructs not to ask users for API keys, instead using Membrane-managed connections. No unrelated secrets or config paths are requested.
Persistence & Privilege
always is false and there are no installation steps that modify other skills or request elevated persistent permissions. Autonomous invocation is allowed by default but is not combined with broad credential access or always:true.
Assessment
This skill is coherent and uses the Membrane CLI to handle auth and API calls. Before installing: (1) verify you trust the @membranehq npm package and review its npm/github pages; (2) review what permissions the Membrane Recurly connector will request in the browser-based auth flow (it will determine what the skill can read/change in your Recurly account); (3) avoid pasting Recurly API keys into chat — the skill advises creating a Membrane connection instead; (4) remember installing global npm packages has supply-chain risk, so install only from trusted sources.Like a lobster shell, security has layers — review code before you run it.
latestvk97c7qmbbgzv4r79wa1xxfm97s8420tk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.