Truelayer

TrueLayer integration. Manage data, records, and automate workflows. Use when the user wants to interact with TrueLayer data.

This skill appears coherent and uses the Membrane CLI to handle TrueLayer auth and actions. Before installing/running commands: (1) confirm you trust the @membranehq/cli package (check the npm page and GitHub repo and use a known version), (2) prefer using npx or a local install or a sandboxed environment if you don't want a global install, (3) be aware the CLI login will open a browser or show an auth URL and produce codes — only paste those codes into the official CLI flow, and (4) ensure you want to grant Membrane access to your TrueLayer connection (consent and access control are managed by Membrane). If you need higher assurance, review Membrane's security/privacy docs and the CLI source code before proceeding.

Type: OpenClaw Skill Name: truelayer Version: 1.0.3 The skill 'truelayer' (SKILL.md) instructs the agent to install and use the Membrane CLI (@membranehq/cli) to interact with financial data via getmembrane.com. It requires high-risk capabilities including global npm package installation, shell command execution, and network access. While these actions are aligned with the stated purpose of managing TrueLayer integrations and the documentation promotes secure credential handling, the reliance on an external CLI with the ability to dynamically create and execute actions meets the threshold for a suspicious classification under the provided criteria.