Paychex
v1.0.2Paychex integration. Manage data, records, and automate workflows. Use when the user wants to interact with Paychex data.
⭐ 0· 75·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name and description (Paychex integration) match the instructions: everything the skill tells the agent to do is Paychex-related and uses Membrane to manage authentication and API calls.
Instruction Scope
SKILL.md instructs the agent (and user) to install and use the Membrane CLI, run membrane login/connect/action/request, and open browser-based auth flows. These actions are within scope for integrating with Paychex, but the doc asks you to perform networked auth and proxy requests via Membrane (which will hold credentials). The skill does not ask to read unrelated files or env vars.
Install Mechanism
There is no registry install spec, but the SKILL.md recommends installing @membranehq/cli globally via npm. This is a normal but non-trivial step (global npm install writes executables to disk). The registry metadata did not list any required binaries, which is a minor inconsistency.
Credentials
The skill declares no required environment variables or credentials. Authentication is delegated to Membrane via interactive login flows, which is proportionate to the stated purpose. Be aware that Membrane will store/manage the Paychex credentials it obtains.
Persistence & Privilege
No always:true, no code files, and the skill is instruction-only. The skill does not request permanent platform presence or modify other skills' configs. The main privilege implication is that using Membrane gives that third party access to Paychex API tokens.
Assessment
This skill appears to be what it says: a Paychex integration that delegates auth and requests to the Membrane platform. Before installing or using it, verify you trust Membrane/getmembrane.com and the @membranehq/cli package (check the official site and the GitHub repo). Understand that authentication happens through Membrane and that Membrane will hold tokens and can proxy requests to Paychex. If you require stricter control, consider: (1) reviewing the Membrane CLI source, (2) creating a dedicated Paychex account with limited scopes for this integration, or (3) calling the Paychex API directly under your own control instead of using an external proxy. Also note the minor metadata inconsistency: the skill doesn't declare required binaries in the registry but the docs require installing the membrane CLI.Like a lobster shell, security has layers — review code before you run it.
latestvk97f7cwhky7w4y6317mhhzbrp18422hy
License
MIT-0
Free to use, modify, and redistribute. No attribution required.