ClawHub

Mip Fund Accounting

v1.0.1

MIP Fund Accounting integration. Manage data, records, and automate workflows. Use when the user wants to interact with MIP Fund Accounting data.

⭐ 0· 32·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the instructions: the SKILL.md describes using the Membrane CLI as a proxy to interact with MIP Fund Accounting. The required capabilities (network access, Membrane account) are aligned with this purpose; no unrelated credentials or binaries are demanded.
✓
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, creating connections, listing actions, running actions, and using Membrane's proxy. The doc does not instruct reading arbitrary local files or pulling unrelated secrets; it explicitly recommends not collecting API keys and delegates auth to Membrane's browser flow.
ℹ
Install Mechanism
There is no formal install spec in the package (instruction-only), but the SKILL.md tells the user to run `npm install -g @membranehq/cli` (and uses npx in examples). Installing a global npm package executes code from the npm registry — this is expected for a CLI but is a moderate operational risk. Using npx or reviewing the package on the registry before installing reduces risk.
✓
Credentials
The skill declares no environment variables, no config paths, and no primary credential. Instructions rely on Membrane's browser auth flow rather than requesting tokens or secrets, which is proportional to the stated purpose.
✓
Persistence & Privilege
The skill is not always-enabled and does not request elevated or persistent system privileges. As an instruction-only skill, it will only operate when invoked; it does not modify other skills or system-wide settings.
Assessment
This skill is coherent and appears to do what it says: use Membrane's CLI to interact with MIP Fund Accounting. Before installing or running it: (1) review the @membranehq/cli package on the npm registry (or use `npx` to avoid a global install) because npm installs execute code; (2) ensure you trust Membrane/getmembrane.com and understand how connector auth works (browser OAuth) so you only grant access to the correct account; (3) confirm any connectionId used belongs to the intended MIP account; and (4) avoid pasting or storing unrelated secrets — the skill intentionally delegates credential handling to Membrane.

Like a lobster shell, security has layers — review code before you run it.

latestvk970256gacb3mvwpb4p7fw22hs847h02

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments