Integrated Finance
v1.0.0Integrated Finance integration. Manage data, records, and automate workflows. Use when the user wants to interact with Integrated Finance data.
⭐ 0· 65·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description say 'Integrated Finance' integration and the SKILL.md exclusively documents using the Membrane CLI and proxy to call Integrated Finance APIs. Required capabilities (network access, a Membrane account, installing @membranehq/cli) are consistent with that purpose.
Instruction Scope
Instructions focus on installing and using the Membrane CLI (login, create connection, list/run actions, proxy requests). They do not instruct reading unrelated files, accessing unrelated environment variables, or exfiltrating local system data. The proxy capability allows arbitrary API calls to Integrated Finance — this is within the stated scope but is powerful, so callers should limit commands to needed endpoints.
Install Mechanism
The skill is instruction-only (no install spec). It instructs users to run `npm install -g @membranehq/cli`. Installing a global npm package is a normal way to get the CLI but carries the usual npm risks (remote package code executed on install). That is expected here but users should verify the package source/version before installing.
Credentials
No environment variables or local credentials are requested. The SKILL.md explicitly advises letting Membrane handle credentials and not asking users for API keys, which is proportionate to the integration use-case.
Persistence & Privilege
The skill does not request persistent system presence (always:false). It's an instruction-only skill and does not modify other skills or system-wide settings. Autonomous invocation is allowed by default but is not combined with other concerning privileges.
Assessment
This skill appears coherent: it tells the agent to use the Membrane CLI to interact with Integrated Finance and does not request unrelated secrets. Before installing/using it, verify you trust the Membrane service and the @membranehq npm package (check the npm org, package maintainers, and package version). Remember that authorizing a connection grants Membrane access to Integrated Finance data for that connection — review consent scopes and minimum privileges. Because the CLI can proxy arbitrary API calls, avoid running action/run or proxy commands you don't understand or that target sensitive endpoints. If you cannot verify the npm package or Membrane account policies, do not install the global CLI or grant connections.Like a lobster shell, security has layers — review code before you run it.
latestvk972g3jhxc7tfj1yq0stnmnjfs84agqj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.