Yoco
v1.0.0Yoco integration. Manage data, records, and automate workflows. Use when the user wants to interact with Yoco data.
⭐ 0· 69·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description describe a Yoco integration and the SKILL.md instructs use of the Membrane CLI and Membrane connections to access Yoco — these requirements align with the stated purpose.
Instruction Scope
Instructions are scoped to installing/running the Membrane CLI, creating a connection, discovering and running actions, and optionally proxying raw Yoco API calls through Membrane. The doc does not instruct reading unrelated local files or requesting unrelated secrets. Note: proxying raw requests sends data through Membrane's service, which is expected but important to be aware of.
Install Mechanism
The skill is instruction-only (no install spec), but tells users to install @membranehq/cli via npm (global install or npx). This is a standard public npm package install (moderate risk relative to direct URL downloads). Consider using npx to avoid a global install if you prefer.
Credentials
The skill declares no required environment variables or local credentials. It relies on Membrane to manage auth server-side and instructs users not to supply API keys locally — this is proportionate to the stated design.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide configs, and is user-invocable. It only instructs the user to install and use the Membrane CLI; no elevated or persistent privileges are requested.
Assessment
This skill appears coherent: it expects you to use the Membrane CLI and a Membrane account to connect to Yoco. Before installing, verify you trust the @membranehq npm package and the Membrane service (they will proxy requests and hold connector credentials). Prefer npx if you don't want a global npm install, and be aware proxying raw API calls will send request/response data through Membrane — review their privacy/security docs. If you need to avoid any third-party proxying, use direct Yoco API access with your own credentials instead.Like a lobster shell, security has layers — review code before you run it.
latestvk978nn1p3zkwr4bzgfwaxrbxz1845vv5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.