Prometeo Openbanking
v1.0.0Prometeo OpenBanking integration. Manage data, records, and automate workflows. Use when the user wants to interact with Prometeo OpenBanking data.
⭐ 0· 54·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The skill declares Prometeo OpenBanking integration and all runtime instructions center on installing and using the Membrane CLI to discover connectors, create connections, run actions, or proxy requests to Prometeo. No unrelated environment variables, binaries, or config paths are requested.
Instruction Scope
SKILL.md stays within expected scope: install CLI, login, create connections, list and run actions, and proxy raw requests. It does not instruct reading local secrets or unrelated files. Important note: using Membrane means banking requests/authentication are proxied through Membrane servers — the instructions explicitly rely on Membrane to manage auth and credential refresh, so users must trust that service with sensitive banking data.
Install Mechanism
No registry install spec is embedded in the skill (instruction-only), but it instructs installing @membranehq/cli via npm (-g). Installing a public npm CLI is a standard approach but carries the usual risks of global npm packages and relying on the package publisher; this is proportionate for the stated functionality.
Credentials
The skill requests no environment variables or credentials and explicitly advises against asking users for API keys. The only required account is a Membrane account (handled via interactive login), which is appropriate for a brokered integration.
Persistence & Privilege
The skill is instruction-only, does not request always:true, and imposes no system-wide configuration or persistent privileges. It does not modify other skills or agent settings.
Assessment
This skill appears internally consistent, but before installing: 1) Verify the npm package name (@membranehq/cli) and its publisher (check the package page and GitHub repo) to avoid typosquatting; 2) Understand that Membrane will broker authentication and traffic to Prometeo — banking data and tokens will be routed through their service, so review Membrane's privacy/security policies and trustworthiness before connecting production accounts; 3) Prefer using sandbox/test bank accounts initially and grant least privilege where possible; 4) Be cautious when running global npm installs (review package code or pin a vetted version) and avoid pasting credentials into places outside official Membrane flows.Like a lobster shell, security has layers — review code before you run it.
latestvk9711c1bgk8z752xasrb00skr984c44h
License
MIT-0
Free to use, modify, and redistribute. No attribution required.