Taxjar
v1.0.2TaxJar integration. Manage Orders, Nexuses, Customers. Use when the user wants to interact with TaxJar data.
⭐ 0· 100·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the runtime instructions: the SKILL.md shows using Membrane CLI to manage TaxJar Orders, Nexuses, Customers and to proxy raw TaxJar API calls. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Instructions are narrowly scoped to installing the Membrane CLI, authenticating the user, creating/using a TaxJar connection, discovering actions, running actions, and proxying API requests. The instructions do not ask the agent to read local files, sweep environment variables, or transmit unrelated data.
Install Mechanism
This is an instruction-only skill (no install spec), but it tells users to install @membranehq/cli via npm (-g). Installing a third-party npm CLI is a common and sensible dependency here, but it carries the usual npm risks (supply-chain/privilege of global install).
Credentials
The skill requests no environment variables or local config paths. Auth is delegated to Membrane (user login and connector flow) which is appropriate for this integration. The user should understand that Membrane will hold the TaxJar credentials once the connection is created.
Persistence & Privilege
The skill does not ask for always: true, does not modify other skills, and does not request elevated platform privileges. It is user-invocable and allows normal autonomous invocation (platform default).
Assessment
This skill appears consistent with a TaxJar integration that uses the Membrane CLI. Before installing: 1) Confirm you trust Membrane (https://getmembrane.com) because creating a connection will grant Membrane access to your TaxJar account; review the connector permissions. 2) Prefer using npx or a local install if you want to avoid a global npm -g install, and verify the @membranehq/cli package and its repository. 3) When connecting, read the authentication prompts in the browser and verify the connector ID returned. 4) No local environment variables are requested by the skill itself, but be aware that any connection you create will allow Membrane to act on your TaxJar data — only proceed if that matches your security posture.Like a lobster shell, security has layers — review code before you run it.
latestvk978tge7fd12hmwzg98xqnqsdh842kg7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.