Till Payments
v1.0.2Till Payments integration. Manage data, records, and automate workflows. Use when the user wants to interact with Till Payments data.
⭐ 0· 64·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description match the instructions: the skill describes a Till Payments integration and the SKILL.md tells the agent to use the Membrane CLI to create/connect actions and run queries against Till Payments. Nothing requested (no env vars, no system paths) is unrelated to that purpose.
Instruction Scope
Instructions direct the user/agent to install and run the Membrane CLI, authenticate via browser (or headless flow), enumerate connections/actions, and invoke actions. This stays within the integration scope. Note: the flow relies on a third-party (Membrane) to handle authentication and will produce CLI output that the agent will parse; the skill does not explicitly limit which data is collected, so the agent should avoid dumping unrelated system data into Membrane commands.
Install Mechanism
Install instructions use npm (npm install -g @membranehq/cli or npx). This is a common, traceable mechanism and not an arbitrary download/extract from an untrusted host. No install spec is embedded in the skill itself (instruction-only), so no code is written to disk by the skill package.
Credentials
The skill declares no required environment variables or credentials. However, it depends on the Membrane account and CLI-managed credentials (OAuth/browser flow). Users must trust Membrane as an intermediary that will store and manage authentication for Till Payments—this is reasonable but requires trusting that third party with connector tokens and data.
Persistence & Privilege
always is false and the skill does not request elevated or persistent system privileges. It does not modify other skills or system-wide agent settings.
Assessment
This skill is coherent with its stated purpose, but it relies on a third-party (Membrane) to handle auth and connections. Before installing or running: verify the Membrane CLI package and its GitHub repo, prefer using npx (or review the package) rather than unconditional global installs, review Membrane's privacy and security practices (how tokens and data are stored/transmitted), and inspect any connector actions you run so you don't inadvertently send unrelated sensitive data. If you manage highly sensitive Till Payments data, test in a non-production account first.Like a lobster shell, security has layers — review code before you run it.
latestvk97b6t2xa21qd26zeagkjg12wx842dkr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.