Bloom Credit
v1.0.0Bloom Credit integration. Manage data, records, and automate workflows. Use when the user wants to interact with Bloom Credit data.
⭐ 0· 92·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with Bloom Credit and all instructions (installing/using the Membrane CLI, creating a connection, listing/running actions, proxying requests) are directly related to that goal. No unrelated services or credentials are requested.
Instruction Scope
Runtime instructions are narrowly scoped to installing/using the Membrane CLI, performing OAuth-style login via the browser, creating connections, listing actions, running actions, and proxying API requests. This stays within the stated purpose, but the proxy capability lets you send arbitrary requests through Membrane to the Bloom Credit API (which may transmit sensitive applicant data)—so be aware of what you proxy.
Install Mechanism
There is no formal install spec, but the instructions tell users to run npm install -g @membranehq/cli (or use npx). Installing a third-party global npm package is a moderate-risk action (it runs code on your machine). The package and repository appear to be from Membrane (getmembrane.com / GitHub), which is consistent, but you should verify the package source and version before installing and avoid running installs as root.
Credentials
The skill declares no environment variables or credentials and explicitly advises against asking users for Bloom API keys (Membrane handles auth). That is proportionate for a connector that delegates auth to a gateway service.
Persistence & Privilege
The skill is instruction-only and does not request permanent presence (always: false). It does not modify other skills or system-wide settings in the provided instructions. Allowing the agent to invoke the skill autonomously is the platform default and not raised here.
Assessment
This skill is coherent but exercises a gateway (Membrane) that will proxy requests to Bloom Credit and handle authentication. Before installing or running commands: verify the @membranehq/cli package and repository (check publisher, version, and source), prefer using npx if you don't want a global install, avoid installing packages as root, and review Membrane's privacy/security docs since proxy requests may include sensitive applicant/credit data. If you need tighter control, perform actions from a controlled environment and inspect the CLI code or restrict commands to read-only queries. If you are uncomfortable installing third-party CLIs, do not proceed.Like a lobster shell, security has layers — review code before you run it.
latestvk9772vvk2w89wb8z297ejqq0h184hwv9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.