Expofp
v1.0.0ExpoFP integration. Manage data, records, and automate workflows. Use when the user wants to interact with ExpoFP data.
⭐ 0· 78·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (ExpoFP integration) aligns with the instructions (use Membrane to connect, list/run actions, and proxy requests to ExpoFP). Minor mismatch: registry metadata lists no required binaries, but the runtime instructions explicitly require the Membrane CLI (npm package) — the skill is instruction-only and expects the user/agent to install that CLI.
Instruction Scope
SKILL.md only instructs use of the Membrane CLI to authenticate, create/list connections, discover and run actions, and proxy API requests to ExpoFP. It does not instruct reading unrelated files or harvesting environment variables, nor does it direct data to unexpected endpoints beyond Membrane/ExpoFP.
Install Mechanism
There is no formal install spec; the doc recommends installing @membranehq/cli via npm (global install). npm is a common distribution channel, but global installs modify the system and you should verify the NPM package and publisher before running. No downloads from untrusted URLs or archive extraction are present.
Credentials
The skill declares no required env vars or credentials and explicitly advises not to ask users for API keys, delegating auth to Membrane. This is proportionate for an integration that uses a third-party proxy/CLI for auth.
Persistence & Privilege
The skill is not always-enabled and does not request persistent system privileges. It is instruction-only and does not modify other skills or system-wide agent settings.
Scan Findings in Context
[NO_CODE_TO_SCAN] expected: The regex scanner found no code files to analyze. This is expected for an instruction-only SKILL.md, but means the runtime behavior depends on the external Membrane CLI you or the agent will install/use.
Assessment
This skill appears coherent for ExpoFP work, but it relies on the external @membranehq/cli (npm) to perform actions and proxy requests. Before installing/running anything: 1) Verify the NPM package and publisher (@membranehq) on the npm registry and the project's homepage; prefer running via npx or a local install rather than an unrestricted global install if you want to limit system changes. 2) Confirm you trust Membrane as the proxy for your ExpoFP data (review their privacy/security docs and where credentials are stored). 3) Do not enter API keys into the skill — follow the provided browser-based login flow. 4) If you need higher assurance, test commands in a controlled environment (non-production account) and review command outputs before automating them.Like a lobster shell, security has layers — review code before you run it.
latestvk97a7ypnq1ps1hqmrg919ker4n84a4hx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.