Payumoney
v1.0.1PayUmoney integration. Manage data, records, and automate workflows. Use when the user wants to interact with PayUmoney data.
⭐ 0· 34·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description state PayUmoney integration and all runtime instructions revolve around using the Membrane CLI to connect to PayUmoney, list actions, run actions, and proxy requests. Required components (membrane CLI, network, Membrane account) are consistent with that purpose and nothing unrelated is requested.
Instruction Scope
SKILL.md only instructs the agent/user to install and run the Membrane CLI, perform login (browser flow or headless code), create/list connections, run actions, and proxy API requests. It does not instruct reading local files, exporting unrelated env vars, or transmitting data to endpoints other than Membrane/PayUmoney. Instructions clearly state Membrane manages credentials and advise not to ask users for API keys.
Install Mechanism
No code files in the skill; installation is instruction-only and recommends installing @membranehq/cli via npm (global install or npx). npm installs are a normal mechanism but do execute third‑party code on the host — moderate risk compared to instruction-only skills that require no installs. The install source is a public npm package (no direct arbitrary download URLs), which is expected but worth reviewing before installing.
Credentials
The skill declares no required environment variables or credentials. It intentionally relies on a Membrane account to hold and manage PayUmoney credentials server-side, which is proportionate to its stated functionality. The concentration of auth in a third-party (Membrane) is expected but should be considered when granting access.
Persistence & Privilege
The skill is not always-enabled and does not request elevated persistence or modifications to other skills or system-wide config. It is user-invocable and can be invoked autonomously by the agent (platform default), which is normal.
Assessment
This skill appears to be what it claims — a Membrane-based PayUmoney integration — but it depends on a third-party CLI and a Membrane account. Before installing or using it: (1) verify you trust Membrane/getmembrane.com and the @membranehq/cli npm package (check the package and its GitHub repo, reviews, and publisher), (2) understand that Membrane will hold and manage PayUmoney credentials and can act on your behalf, so review their privacy/security docs and least-privilege options, (3) run the CLI in a controlled environment if you are cautious (e.g., sandbox/VM), and (4) avoid entering sensitive production credentials until you confirm the provider and CLI code are trustworthy.Like a lobster shell, security has layers — review code before you run it.
latestvk97fcgr08q9bhf32ddek7tf1w5848j07
License
MIT-0
Free to use, modify, and redistribute. No attribution required.