Phyllo

Phyllo integration. Manage data, records, and automate workflows. Use when the user wants to interact with Phyllo data.

This skill is coherent: it delegates Phyllo access to the Membrane CLI. Before installing, verify you trust the @membranehq/cli package (check the npm package page and GitHub repository), consider using npx rather than a global install to avoid altering your system, and be prepared to authenticate via a browser/code (the CLI will store local auth state). If you do not want an agent to run shell commands or make network requests autonomously, avoid enabling autonomous execution for this skill or limit its permissions. If you need higher assurance, inspect the Membrane CLI source or run it in an isolated environment (container or dedicated machine) before granting it access to your data.

Type: OpenClaw Skill Name: phyllo Version: 1.0.1 The skill requires the agent to perform high-risk operations including global package installation ('npm install -g @membranehq/cli') and extensive shell command execution for authentication and data management. It also enables dynamic action creation ('membrane action create'), allowing the agent to generate and execute new integration logic on the fly. While these capabilities are aligned with the stated purpose of the Membrane/Phyllo integration, the reliance on shell-based interactions and global system modifications in SKILL.md constitutes a significant attack surface without explicit input sanitization guidance.