Pricefy
v1.0.2Pricefy integration. Manage data, records, and automate workflows. Use when the user wants to interact with Pricefy data.
⭐ 0· 67·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Pricefy integration) match the instructions: all runtime steps use Membrane to connect to Pricefy and run actions or proxied API calls. Requesting a Membrane account and network access is expected for this purpose.
Instruction Scope
SKILL.md only instructs installing and using the Membrane CLI, performing OAuth-style browser login, listing/creating connections, running actions, and proxying API requests to Pricefy. It does not ask the agent to read unrelated files, environment variables, or exfiltrate data to unexpected endpoints.
Install Mechanism
The registry has no formal install spec (instruction-only), but SKILL.md tells the user to install @membranehq/cli globally via npm. This is coherent but the npm install step will write binaries to disk; users should verify they trust the @membranehq/cli package and the installation source.
Credentials
No environment variables, credentials, or config paths are requested by the skill. The doc explicitly advises letting Membrane handle credentials, which explains the lack of API keys or secrets in the skill metadata.
Persistence & Privilege
Skill does not request always-on presence (always: false) and does not ask to modify other skills or system-wide settings. Autonomous invocation is allowed by default — normal for skills and not by itself a concern.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to access Pricefy and does not request unrelated credentials. Before installing: (1) confirm you trust the Membrane project and the @membranehq/cli npm package (installing global npm packages modifies your system), (2) verify the Membrane homepage/repository and OAuth scopes shown during login so you understand what access you'll grant, and (3) prefer running the CLI in a controlled environment (not a sensitive production host) if you are unsure. If you need stricter assurance, review the official Membrane CLI repo and the package's npm release history before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk97c971ve1q8mnkx814dykrvbh842z25
License
MIT-0
Free to use, modify, and redistribute. No attribution required.