Payfit

PayFit integration. Manage data, records, and automate workflows. Use when the user wants to interact with PayFit data.

This skill appears internally consistent for integrating PayFit via the Membrane service. Before installing or running it, verify you trust the Membrane project and the npm package (@membranehq/cli) — installing a global CLI pulls code from the npm registry. Prefer installing the CLI in a sandboxed environment or review the package's source/release pages on GitHub. Use the browser-based auth flow rather than pasting tokens into chat, and avoid sharing the one-time auth code in untrusted channels. If you require an offline or audit-friendly setup, confirm how Membrane stores connection credentials and whether it meets your org's compliance requirements.

Type: OpenClaw Skill Name: payfit Version: 1.0.1 The skill bundle relies on the installation of a global npm package (@membranehq/cli) and delegates all logic and authentication to a third-party service (Membrane). It instructs the agent to perform high-risk operations, including remote action creation and execution, which effectively grants the remote service control over the agent's tasks. While these actions are aligned with the stated purpose of the PayFit integration, the requirement for global CLI installation and the 'black box' nature of remote action execution represent significant security risks and broad permissions without local transparency.