Smarterpay
v1.0.2SmarterPay integration. Manage data, records, and automate workflows. Use when the user wants to interact with SmarterPay data.
⭐ 0· 113·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (SmarterPay integration) match the instructions: all runtime steps use the Membrane CLI to discover connectors, create connections, run actions, and proxy API requests to SmarterPay.
Instruction Scope
Instructions are scoped to installing and using the Membrane CLI and interacting with SmarterPay via Membrane's proxy and action APIs. This includes headless login flows and arbitrary proxied API calls — broad but expected for a connector skill. The instructions do not ask the agent to read unrelated files or exfiltrate local secrets.
Install Mechanism
There is no formal install spec in the registry; the SKILL.md tells users to install @membranehq/cli via npm (-g). Installing a global npm package is a moderate-risk action in general, but @membranehq is a scoped package that matches the stated provider; no opaque downloads or extracts are required by the skill itself.
Credentials
The skill declares no required env vars, no credentials, and advises relying on Membrane to manage auth. That is proportionate to a connector that delegates auth to a third-party service.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform persistence or modify other skills; default autonomous invocation is allowed (platform default) but there is no additional privileged presence requested.
Assessment
This skill appears coherent and limited to using the Membrane CLI to operate on SmarterPay data. Before installing/using: (1) verify you trust the @membranehq package (installing global npm packages can be risky if the package name is spoofed), (2) confirm your Membrane account and connector permissions — Membrane will proxy requests to SmarterPay and thus will have access to that data, and (3) only authorize connections you intend to grant access to, and avoid providing unrelated API keys or local secrets. If you want stricter control, run the CLI in an isolated environment or inspect the Membrane CLI package contents before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk97cvjrzr1t4bk0k2bsqyb1jv5842gvj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.