Bambora
v1.0.0Bambora integration. Manage data, records, and automate workflows. Use when the user wants to interact with Bambora data.
⭐ 0· 65·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name and description say it integrates with Bambora and all instructions center on using the Membrane CLI to connect to Bambora and run actions or proxied requests. There are no unrelated environment variables, binaries, or config paths requested.
Instruction Scope
SKILL.md instructs installing @membranehq/cli, logging in via browser, creating connectors/connections, listing and running actions, and proxying requests to the Bambora API via Membrane. It does not instruct reading local secrets, system files, or other unrelated data.
Install Mechanism
There is no platform install spec in the registry (skill is instruction-only), but SKILL.md recommends installing @membranehq/cli via npm (-g) or using npx. Installing a package from the public npm registry is a common pattern and traceable, but global npm installs modify the system and require privileges; using npx or inspecting the package source (GitHub) is a safer alternative.
Credentials
The skill requests no environment variables or credentials and explicitly instructs users to let Membrane manage credentials. Membrane will handle Bambora authentication server-side; this is proportionate to the stated purpose but does mean the Membrane service will have authorization to access the user's Bambora data via connections.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings, and is user-invocable. It doesn't request persistent system privileges beyond installing a CLI if the user chooses to do so.
Assessment
This skill is coherent: it delegates Bambora access to the Membrane CLI/service rather than asking for API keys locally. Before installing or using it, verify you trust the Membrane service and the @membranehq/cli package (check the publisher and GitHub repo), prefer using npx to avoid a global npm -g install, and review the permissions and scopes granted when you connect your Bambora account in Membrane. Remember that by connecting, you grant Membrane the ability to act on your Bambora data, so confirm its privacy/security posture and that the connection uses only the access you intend.Like a lobster shell, security has layers — review code before you run it.
latestvk97fe3bnv2vd23gnab2tgx7tjh84ae8f
License
MIT-0
Free to use, modify, and redistribute. No attribution required.