Cashbuddy
v1.0.0Cashbuddy integration. Manage data, records, and automate workflows. Use when the user wants to interact with Cashbuddy data.
⭐ 0· 64·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the runtime instructions. The SKILL.md describes using the Membrane CLI to connect to Cashbuddy, run actions, and proxy API requests — all coherent with a 'Cashbuddy integration' skill.
Instruction Scope
All runtime steps are limited to installing/using the Membrane CLI, performing login via the browser flow, creating connections, listing actions, running actions, and proxying requests through Membrane. The instructions do not ask the agent to read unrelated files, environment variables, or system configuration.
Install Mechanism
The skill is instruction-only (no install spec), but SKILL.md instructs installing @membranehq/cli via npm (global) and suggests using npx. Pulling a CLI from the public npm registry is expected for this integration, but global npm installs carry the usual supply-chain risk; no arbitrary downloads or obscure URLs are used.
Credentials
The skill declares no required environment variables or credentials and explicitly advises not to collect user API keys, instead relying on Membrane to manage auth. This is proportionate, though it means the user will entrust Membrane with the service credentials/session tokens.
Persistence & Privilege
The skill does not request 'always' presence and gives no instructions to modify other skills or system-wide configs. It relies on the Membrane service for credential storage and runtime actions.
Assessment
This skill is coherent: it uses the Membrane CLI to connect to Cashbuddy and does not ask for unrelated secrets. Before installing or running commands, decide whether you trust Membrane to hold your Cashbuddy access (Membrane will manage the OAuth/tokens server-side). Prefer using npx or a local install if you want to avoid a global npm install, verify the @membranehq/cli package source (npm and the GitHub repo), and inspect Membrane's privacy/security docs. If you need to limit exposure, create a dedicated Cashbuddy account or least-privilege connection for testing rather than using your primary account.Like a lobster shell, security has layers — review code before you run it.
latestvk97bbynmjkztqxfy67sh73vy7d84538p
License
MIT-0
Free to use, modify, and redistribute. No attribution required.