Jp Funda
v1.0.2JP Funda integration. Manage Organizations, Pipelines, Users, Filters. Use when the user wants to interact with JP Funda data.
⭐ 0· 89·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The SKILL.md clearly targets JP Funda data (reports, company lookups) and instructs use of Membrane as a proxy. However the short description mentions "Manage Organizations, Pipelines, Users, Filters" (which sounds like platform/connector management) but the runtime doc focuses on JP Funda API actions — a small mismatch in wording. The skill does not declare the Membrane CLI binary in the manifest even though its instructions require it.
Instruction Scope
Instructions are concrete: install the Membrane CLI, run browser-based login, discover and run Membrane actions, or proxy requests through Membrane. The instructions do not ask the agent to read unrelated files, environment variables, or exfiltrate data; they remain scoped to interacting with Membrane and the JP Funda API.
Install Mechanism
Installation is via a public npm package: `npm install -g @membranehq/cli`. This is a standard registry install (moderate trust surface). There is no direct download of arbitrary archives or obscure URLs. The manifest, however, contains no install spec and does not list the CLI as a required binary — a documentation/manifest omission.
Credentials
No environment variables or secrets are requested by the manifest. The SKILL.md explicitly delegates auth to Membrane (browser OAuth flow) and advises not to ask users for API keys, which is proportionate to the described functionality.
Persistence & Privilege
The skill is user-invocable, not always-enabled, and does not request any persistent elevated privileges or modify other skills. Autonomous invocation is allowed by default but is not combined with other high-risk signals here.
Assessment
This skill is an instruction-only integration that uses the Membrane CLI as a proxy to JP Funda — that design is coherent and there are no hidden env vars or downloads beyond a public npm package. Before installing: (1) verify you trust the @membranehq npm package and the Membrane service (homepage: getmembrane.com); (2) be comfortable installing a global npm CLI (it will create a global binary); (3) expect a browser-based login flow (or a headless copy/paste flow); (4) note the manifest omitted listing the 'membrane' binary and the short description wording ("Organizations, Pipelines, Users, Filters") differs slightly from the action list—this looks like a documentation mismatch rather than malicious behavior. If you need higher assurance, ask the publisher for the exact connector ID and a checksum or link to the official Membrane CLI release to validate the package before installation.Like a lobster shell, security has layers — review code before you run it.
latestvk9770v05capb5cvkqq09bff78n842ezr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.