Frollo
v1.0.0Frollo integration. Manage data, records, and automate workflows. Use when the user wants to interact with Frollo data.
⭐ 0· 57·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description say this integrates with Frollo and the SKILL.md exclusively instructs use of the Membrane CLI to connect, list actions, run actions, or proxy requests to the Frollo API. Required capabilities (network and a Membrane account) match the stated purpose; no unrelated env vars, binaries, or config paths are requested.
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, performing browser-based OAuth flows, discovering and running actions, and optionally proxying requests to Frollo via Membrane. The instructions do not ask the agent to read arbitrary local files or unrelated environment variables. Proxying data and credentials to Membrane is explicit in the docs and within scope of a connector-based integration.
Install Mechanism
There is no automated install spec in the registry, but the SKILL.md tells the user to run `npm install -g @membranehq/cli`. Installing a global npm package is a normal step for a CLI, but it does run third-party code from the npm registry — a moderate-risk operation that requires trusting the @membranehq package and its maintainers.
Credentials
The skill declares no required environment variables or local credentials and explicitly says Membrane manages auth. This is proportionate, but it does mean Membrane (getmembrane.com and their service) will hold and use the user's Frollo credentials/tokens and will proxy API calls — so trusting that third-party service is necessary.
Persistence & Privilege
The skill is instruction-only, has no install-time hooks in the registry, does not request persistent privileges, and is not always-enabled. Agent autonomy is allowed by default but is not elevated by this skill beyond normal behavior.
Assessment
Before installing or using this skill, understand that it relies on the Membrane service and its CLI: installing `@membranehq/cli` will run code from npm, and the Membrane service will hold OAuth credentials and see proxied API requests to your Frollo account. If you plan to use this with personal finance data, confirm you trust getmembrane.com and the @membranehq package. Consider: (1) reviewing the npm package and its source repo; (2) using a dedicated Membrane account or least-privilege connection if possible; (3) following the browser-based login flow only in a secure environment (don't paste authorization codes into untrusted places); and (4) avoiding copying sensitive credentials into the skill — the skill itself advises against requesting API keys, which is good practice.Like a lobster shell, security has layers — review code before you run it.
latestvk97ayksjbemp7na8acpetah03d84a0pq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.