Ratepay
v1.0.2Ratepay integration. Manage data, records, and automate workflows. Use when the user wants to interact with Ratepay data.
⭐ 0· 70·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (Ratepay integration) match the instructions: discover connectors, create connections, run actions, and proxy API requests via Membrane. The actions and endpoints referenced are coherent with interacting with Ratepay.
Instruction Scope
SKILL.md instructs the agent/user to install and use the Membrane CLI, log in via browser, create connections, list actions, run actions, and proxy requests to Ratepay. These steps stay within the stated purpose and do not ask for unrelated files, env vars, or secrets. Note: it instructs a global npm install and browser-based login which have side effects (installed binary, external auth flow).
Install Mechanism
This is an instruction-only skill (no install spec), but SKILL.md tells users to run `npm install -g @membranehq/cli`. Installing an npm package from the public registry is a reasonable, traceable approach for a CLI, but global npm installs modify the system and you should verify the package's authenticity (publisher, npm page, GitHub repo).
Credentials
The skill declares no required environment variables or credentials and relies on Membrane's browser-based login/connection flow to manage secrets. That is proportionate to the stated purpose. It does not ask for unrelated credentials or config paths.
Persistence & Privilege
always:false and default autonomous invocation settings are appropriate. The skill does not request persistent elevated privileges or to modify other skills' configs. Installing the Membrane CLI will create a binary on the system (expected for a CLI-based workflow).
Assessment
This skill appears to be what it says: a wrapper/helper for using Membrane to access Ratepay. Before installing/running it: verify you trust @membranehq on npm and the repository (check the npm package page and the GitHub repo linked in the SKILL.md), be aware the instructions recommend a global npm install which alters your system path, and the login flow opens a browser and delegates auth to Membrane (so Membrane will hold the API credentials and proxy requests). If you need to run in a headless or highly restricted environment, confirm the headless auth flow and any network egress rules. Note the registry metadata did not list the Membrane CLI as a required binary — this minor mismatch is expected for instruction-only skills but worth double-checking.Like a lobster shell, security has layers — review code before you run it.
latestvk97cj93ch8pqwa3e31y5wq658s843xkq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.