Sumup
v1.0.2SumUp integration. Manage data, records, and automate workflows. Use when the user wants to interact with SumUp data.
⭐ 0· 78·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is an instruction-only integration for SumUp that consistently instructs the agent to use the Membrane CLI and a Membrane account to manage SumUp data. Requiring the Membrane CLI and a Membrane account is coherent with the described purpose.
Instruction Scope
SKILL.md only instructs the agent to install/use the Membrane CLI, run membrane commands (login, connect, action list/run, request proxy) and follow browser-based auth flows. It does not instruct reading unrelated files, accessing unrelated env vars, or exfiltrating data to unexpected endpoints.
Install Mechanism
No formal install spec is bundled (instruction-only). The doc recommends installing @membranehq/cli globally via npm (npm install -g). Suggesting a global npm install is expected for a CLI but carries the usual npm trust considerations (verify the package source and publisher before installing).
Credentials
The skill declares no required environment variables or credentials. It relies on Membrane-managed connections and browser-based auth for SumUp, which is proportionate to the stated functionality.
Persistence & Privilege
The skill is not always-enabled and does not request elevated persistence or modifications to other skills or system-wide agent settings. Autonomous invocation is permitted by default but not combined with other concerning privileges.
Assessment
This skill looks internally consistent: it expects you to install and use the Membrane CLI and to authenticate via a Membrane account (no API keys are requested). Before installing, verify the @membranehq/cli npm package and publisher are legitimate, be comfortable authorizing Membrane to access your SumUp account (the proxy will see requests/data), and only install global npm packages from trusted sources. If you require stricter controls, consider running the CLI in a restricted environment or reviewing Membrane's privacy/security documentation and the package's npm/GitHub pages first.Like a lobster shell, security has layers — review code before you run it.
latestvk979zxdq0jf7z773pgqpbnmeyd8420yt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.