Finnhub
v1.0.2Finnhub integration. Manage data, records, and automate workflows. Use when the user wants to interact with Finnhub data.
⭐ 0· 117·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (Finnhub integration) matches the instructions which direct the agent to use Membrane to connect to Finnhub and run queries; required resources (network access, Membrane account, Membrane CLI) are appropriate for that purpose.
Instruction Scope
SKILL.md only instructs the agent to install and use the Membrane CLI, create/list connections, run actions, and optionally proxy requests to the Finnhub API; it does not instruct reading unrelated files, exporting other credentials, or sending data to unexpected endpoints.
Install Mechanism
There is no formal install spec in the skill metadata, but the runtime docs tell users to run `npm install -g @membranehq/cli`. This is an external global npm install (manual step) — reasonable for the described workflow but worth reviewing before installing.
Credentials
The skill declares no required environment variables, config paths, or credentials. Authentication is delegated to Membrane (the instructions explicitly advise against asking users for API keys), which is proportionate to the stated purpose.
Persistence & Privilege
The skill does not request always:true and does not ask to modify other skills or system-wide settings. It is an instruction-only skill that relies on a separate CLI for auth and calls.
Assessment
This skill appears to do what it says — it uses Membrane to talk to Finnhub rather than asking you for raw API keys. Before installing or following the instructions: (1) verify you trust the @membranehq/cli package and the Membrane service (review its GitHub repo, README, and privacy/terms); (2) prefer installing the CLI in a sandbox/container or without -g if you want to limit system-wide change; (3) understand that creating a connection authorizes Membrane to act on your behalf for Finnhub data, so review the permissions and token handling; and (4) if you need higher assurance, inspect the CLI source code or run it in an environment where you can audit network calls.Like a lobster shell, security has layers — review code before you run it.
latestvk97290ajgr9tez5gq795agj6bd8437rc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.