Tribe Payments

Tribe Payments integration. Manage data, records, and automate workflows. Use when the user wants to interact with Tribe Payments data.

This skill appears to do what it says: it uses the Membrane CLI to access Tribe Payments via a connector. Before installing or using it: 1) Verify the npm package @membranehq/cli is the official Membrane CLI (check the project homepage/repo and npm publisher). 2) Prefer installing in a controlled environment (not a sensitive production host) or use a container/virtual environment rather than a global -g install. 3) Use a least-privilege account when authenticating and review the connection's permissions; understand where CLI credentials are stored locally and how to revoke them. 4) If you need stronger assurance, consult Membrane/Tribe Payments docs or your security team to confirm the connectorKey 'tribe-payments' is official and that stored tokens are handled according to your policies.

Type: OpenClaw Skill Name: tribe-payments Version: 1.0.3 The skill acts as a wrapper for the Membrane CLI to interact with Tribe Payments. It is classified as suspicious due to an abnormally broad and sensitive list of entities in SKILL.md (e.g., 'Breach', 'Vulnerability', 'Firewall Rule', 'VPN Connection', 'Encryption Key') that are unrelated to standard payment processing and may be intended to misdirect the agent's capabilities. Additionally, the instructions require global installation of an external npm package (@membranehq/cli) and the metadata contains a future-dated timestamp (2026), which is unusual for legitimate packages.