Fintechos
v1.0.0FintechOS integration. Manage data, records, and automate workflows. Use when the user wants to interact with FintechOS data.
⭐ 0· 53·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (FintechOS integration) match the instructions which show how to use the Membrane CLI to discover connectors, create connections, run actions, and proxy API requests to FintechOS. There are no unrelated credentials, binaries, or install requirements in the manifest that would conflict with the stated purpose.
Instruction Scope
SKILL.md instructs the agent to install/use the @membranehq/cli, run commands like `membrane login`, `membrane connect`, `membrane action run`, and `membrane request` (which can proxy arbitrary FintechOS API endpoints). These steps are in-scope for a connector integration, but note that once a connection exists the agent (or CLI) can issue arbitrary proxied API calls to the user's FintechOS account — expected for this use case, but broad in capability so users should ensure they trust the agent/skill when connections are active.
Install Mechanism
No bundled install spec in the registry; the SKILL.md asks the user to install the Membrane CLI via `npm install -g @membranehq/cli` or use `npx`. Installing a global npm package is a standard approach but has moderate risk compared to using only built-in tools (it writes to disk and alters PATH). No downloads from untrusted URLs or archive extraction are requested.
Credentials
The skill declares no environment variables or secrets. It relies on Membrane to manage credentials server-side and instructs users to authenticate via the browser-based flow. The lack of requested local secrets is proportional to the described functionality.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent presence or modify other skills. Autonomous invocation is allowed by default but not unusual; there is no indication the skill attempts to elevate privileges or persist beyond the expected CLI usage.
Assessment
This is an instruction-only skill that delegates FintechOS access to the Membrane CLI. Before installing or using it: 1) Confirm you trust getmembrane.com and @membranehq/cli from npm; prefer `npx` if you want to avoid a global install. 2) Understand that after you complete the Membrane <-> FintechOS connection the agent/CLI can run actions and proxied API requests against your FintechOS account — review permissions and revoke the connection when finished. 3) The skill does not request local API keys or environment secrets, but you should still avoid leaving authenticated sessions on shared machines (run `membrane logout` or revoke connections via the Membrane dashboard). 4) If you need a stricter audit trail, inspect Membrane's logs/policies and the specific actions you allow the skill to run before granting access.Like a lobster shell, security has layers — review code before you run it.
latestvk97e4mwyprgnjvr56b07qqr45x84exam
License
MIT-0
Free to use, modify, and redistribute. No attribution required.