Teller
v1.0.0Teller integration. Manage data, records, and automate workflows. Use when the user wants to interact with Teller data.
⭐ 0· 30·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description say 'Teller integration' and the SKILL.md exclusively documents using the Membrane CLI to discover, connect, and proxy requests to Teller. Required capabilities (network access, a Membrane account) match the stated purpose; there are no unrelated credential or binary requirements.
Instruction Scope
Runtime instructions are limited to installing/using @membranehq/cli, logging in via browser, creating/listing connections, listing/running actions, and proxying requests through Membrane. The instructions do not direct the agent to read arbitrary local files, environment variables, or transmit data to endpoints outside Membrane/Teller.
Install Mechanism
This is instruction-only (no install spec). It recommends a global npm install (npm install -g @membranehq/cli) and npx usage. Installing a CLI from the public npm registry is a reasonable approach for this functionality but does execute third-party code on the host — a moderate, expected risk.
Credentials
The skill declares no required environment variables or secrets and explicitly advises not to request API keys (Membrane handles credentials server-side). The absence of extra credentials is proportional to the described integration.
Persistence & Privilege
The skill is not always-included and does not request system-wide persistence or modify other skills. Autonomous invocation is permitted (platform default) but not combined with other concerning privileges.
Assessment
This skill appears coherent and limited: it asks you to install and use the official Membrane CLI to connect to Teller and relies on browser-based auth. Before installing, verify the @membranehq/cli package and the Membrane project (npm page and GitHub repo) to confirm publisher identity. Be aware that a global npm install runs code from the npm registry — avoid installing on sensitive/shared systems you don't control. Remember that creating a connection grants Membrane (their servers) access to the connected Teller account, so review the permissions and trust Membrane as the intermediary. If you prefer more control, consider creating least-privilege credentials in Teller (if supported) or reviewing Membrane's privacy/docs before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk97eexgnfk56dhqz058sd8vc8h8476dc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.