Rootfi
v1.0.2RootFi integration. Manage data, records, and automate workflows. Use when the user wants to interact with RootFi data.
⭐ 0· 73·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description say 'RootFi integration' and the instructions show how to connect to RootFi via the Membrane CLI (discover connectors, create connections, run actions, proxy requests). The requested tools (Membrane CLI via npm/npx) are appropriate for this purpose.
Instruction Scope
SKILL.md directs only to install/use the Membrane CLI, perform login via browser, list/connect RootFi connectors, run actions, and proxy API requests through Membrane. It does not instruct reading unrelated files, exporting unrelated env vars, or exfiltrating data to unexpected endpoints.
Install Mechanism
There is no install spec in the registry (instruction-only). The doc suggests npm install -g @membranehq/cli or npx usage — standard package sources. Because no archives or remote downloads are embedded in the skill itself, install risk is low but depends on the user installing an npm package.
Credentials
The skill declares no required env vars, no config paths, and explicitly advises against asking users for API keys. The only external requirement is a Membrane account (expected for this integration).
Persistence & Privilege
The skill is not always-on and does not request elevated or persistent system privileges. Model invocation is allowed (platform default) and appropriate for an integration skill.
Scan Findings in Context
[no_regex_findings] expected: The static regex scanner had no code files to analyze (instruction-only SKILL.md). This is consistent with the skill being a documentation/instruction integration.
Assessment
This skill is coherent: it guides the agent to use the Membrane CLI to connect to RootFi and does not request unrelated secrets. Before installing or running commands, verify you trust Membrane (https://getmembrane.com and the linked docs), because you'll authenticate via their service and proxy requests through it. Installing the CLI requires npm (global install or npx); prefer npx or inspect the package (@membranehq/cli) if you want to avoid a global install. Be aware that login opens a browser and that Membrane will hold/handle auth for RootFi — review their privacy/terms if you have sensitive data. If you prefer not to delegate auth to a third party, do not create the connection and instead use your own authorized workflow.Like a lobster shell, security has layers — review code before you run it.
latestvk977wxgn34w7v4679xst5kqhw5843awc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.