Tink
v1.0.0Tink integration. Manage data, records, and automate workflows. Use when the user wants to interact with Tink data.
⭐ 0· 32·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with Tink using the Membrane proxy/CLI and all declared instructions and steps (login, connect, action list/run, proxy request) align with that purpose. There are no environment variables, config paths, or unrelated binaries requested that would be inconsistent with a Tink integration.
Instruction Scope
SKILL.md is focused on using the Membrane CLI to discover and run Tink actions and to proxy raw API requests. It does not instruct the agent to read unrelated files, access other credentials, or transmit data to unexpected endpoints; it requires a Membrane account and network access, which are reasonable for this workflow.
Install Mechanism
There is no registry install spec, but the SKILL.md instructs installing the Membrane CLI via npm (npm install -g @membranehq/cli) or using npx. Installing from the public npm registry is a common pattern but carries the usual supply-chain considerations; the lack of a formal install spec in the registry metadata is a minor inconsistency.
Credentials
The skill declares no required environment variables or credentials. Authentication is performed via Membrane's login flow, which is consistent with the stated advice to let Membrane manage secrets rather than asking the user for API keys.
Persistence & Privilege
The skill is instruction-only, does not request always:true, does not modify other skills or system-wide settings, and does not ask for persistent system-level access beyond installing a CLI tool per the instructions.
Assessment
This skill appears to be what it says: a guide to using the Membrane CLI to interact with Tink. Before installing or running it, consider: (1) Verify you trust the Membrane project and the @membranehq/cli npm package (review the package page, source repo, and recent releases). (2) Prefer running via npx or reviewing the package contents before a global npm install. (3) Use an account with appropriate least-privilege access to avoid exposing unrelated data. (4) If you need stronger assurance, ask the publisher for a formal install spec or a signed release URL and confirm there are no hidden steps that would read local files or request unrelated credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk972tmtd7aafkmvbrt85ktdcyx8492dq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.