Wealthbox
v1.0.0Wealthbox integration. Manage data, records, and automate workflows. Use when the user wants to interact with Wealthbox data.
⭐ 0· 51·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Wealthbox integration) match the runtime instructions: use Membrane CLI to create a Wealthbox connection, list/run actions, and proxy API requests. Nothing requested (no env vars, no config paths) is unrelated to that purpose.
Instruction Scope
SKILL.md confines the agent to installing/using the Membrane CLI and running Membrane commands (login, connect, action list/run, request). It does not instruct reading arbitrary files, harvesting environment variables, or sending data to endpoints outside Membrane/Wealthbox.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but SKILL.md tells users to run `npm install -g @membranehq/cli` (or use npx). Installing a global npm package is a normal step for a CLI but carries the usual trust/risk of executing third-party code; consider using npx or verifying the package before a global install.
Credentials
The skill declares no required env vars or credentials and explicitly instructs not to ask users for Wealthbox API keys. It relies on Membrane to manage auth server-side, which is proportionate — but does require trusting the external Membrane service with your Wealthbox connection.
Persistence & Privilege
The skill does not request persistent/always-on privileges, does not modify other skills, and requires no system config paths. Autonomous invocation is allowed by default but is not combined with other broad privileges here.
Assessment
This skill is consistent with a Wealthbox integration that delegates auth and proxied requests to the Membrane service. Before installing or using it: (1) verify the @membranehq/cli package and Membrane service (npm page, GitHub repo, privacy/security docs); (2) prefer running via npx to avoid a global install, or install in an isolated environment if you are cautious; (3) understand that Membrane will hold and refresh credentials for your Wealthbox connection—only connect accounts you are comfortable granting to that service; (4) if you need higher assurance, inspect the Membrane CLI source or use a direct Wealthbox integration that you control. Otherwise, the skill itself is coherent and does not request unrelated secrets or system access.Like a lobster shell, security has layers — review code before you run it.
latestvk97f7a096vz0ehdxprpztxtnv5845r5z
License
MIT-0
Free to use, modify, and redistribute. No attribution required.