Fintechblocks
v1.0.0FintechBlocks integration. Manage data, records, and automate workflows. Use when the user wants to interact with FintechBlocks data.
⭐ 0· 57·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with FintechBlocks and all runtime instructions show using the Membrane CLI and Membrane connections to reach FintechBlocks. Requiring the Membrane CLI (installed by the user) and network access is proportional to the described purpose.
Instruction Scope
SKILL.md instructs only CLI operations (installing Membrane, logging in, creating/ listing connections, listing/ running actions, and proxying requests). It does not instruct reading unrelated local files, gathering unrelated env vars, or exfiltrating data to unknown endpoints. Note: it does rely on Membrane to proxy requests to FintechBlocks, so requests and payloads will flow via Membrane's service.
Install Mechanism
There is no install spec in the registry (instruction-only). The README tells users to install @membranehq/cli via npm (npm install -g @membranehq/cli or npx). That is a common, traceable install method; the skill itself does not ship or auto-download code. Users should verify the npm package publisher and trustworthiness of @membranehq before installing.
Credentials
The skill declares no required env vars or secrets. It explicitly instructs not to ask users for API keys and relies on Membrane-managed connections and browser-based auth. This is proportionate; however, using the skill means sending requests and data through Membrane's servers, which you should trust for handling credentials and sensitive data.
Persistence & Privilege
The skill does not request persistent presence (always:false), does not modify other skills, and does not require special system privileges. Autonomous invocation is allowed by default but is not combined with elevated privileges or broad credential access.
Assessment
This skill is instruction-only and coherent: it tells you to install and use the Membrane CLI to connect to FintechBlocks rather than embedding secrets locally. Before installing or using it: 1) verify the npm package @membranehq/cli publisher (ensure it matches the Membrane project) and inspect the package on the npm/GitHub pages; 2) understand that API calls and credentials will be proxied through Membrane's service—if you handle sensitive financial data, review Membrane's privacy/security policies and trust posture; 3) run the CLI install command yourself (avoid pasting random commands from unknown sources), and only complete browser-based authentication if you trust the tenant/account you are logging into; 4) if you need an offline or self-hosted integration for stricter control, ask for alternative instructions—this skill assumes using Membrane's hosted flow. If you want a deeper review, provide any packaged code or a link to the exact npm/GitHub repo for the CLI and connector behavior so I can check for unexpected behaviors or network endpoints.Like a lobster shell, security has layers — review code before you run it.
latestvk979hfpcekem0m5h379cqgrwpn84cz5h
License
MIT-0
Free to use, modify, and redistribute. No attribution required.