1Crm
v1.0.21CRM integration. Manage data, records, and automate workflows. Use when the user wants to interact with 1CRM data.
⭐ 0· 100·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description say '1CRM integration' and the SKILL.md consistently instructs using the Membrane CLI to connect to 1CRM, discover actions, run actions, or proxy raw API calls. Required network access and a Membrane account are explicitly stated and appropriate for this purpose.
Instruction Scope
Instructions direct the agent/user to install and run the Membrane CLI, perform interactive login (browser flow / headless URL flow), create connections, list actions, run actions, and proxy requests. These operations will send requests and request/response data through Membrane (a third‑party service), which is expected but worth noting because data and API requests flow via Membrane's servers.
Install Mechanism
There is no formal install spec in the skill bundle; instead SKILL.md tells the user to run 'npm install -g @membranehq/cli' or use npx. Installing a global npm CLI is a standard but higher-scope action than a pure instruction-only skill — it writes to disk and requires elevated permissions on some systems. The package referenced appears to be a scoped npm package (not an arbitrary URL), which is proportionate but still a moderate installation risk compared to instruction-only.
Credentials
The skill does not request environment variables or secrets. It explicitly recommends letting Membrane handle credentials and not asking the user for API keys. The only required authorization is a Membrane account and granting Membrane access to the user's 1CRM instance — appropriate for the functionality.
Persistence & Privilege
The skill is not always-included and does not declare persistent privileges. It does not request modifications to other skills or system-wide settings. Installing the Membrane CLI would be a user action outside the skill bundle and is not performed automatically by the skill metadata.
Assessment
This skill appears internally consistent: it uses the Membrane CLI to access 1CRM and does not ask for unrelated credentials. Before installing/using it, consider the following: (1) installing the CLI requires npm global install or use of npx — prefer npx or a local install if you want to avoid global packages; (2) Membrane acts as a proxy: API requests and data will travel through Membrane's service, so verify you trust https://getmembrane.com and review its privacy/permission scopes; (3) the SKILL.md has no automated install — the agent will not auto-install the CLI for you, you must run the commands yourself; (4) limit the account/connection scopes you grant in Membrane to the minimum necessary; and (5) if you need higher assurance, review the @membranehq/cli package source and Membrane's documentation before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk973xjwk9fct5rpw867x12ms858437ex
License
MIT-0
Free to use, modify, and redistribute. No attribution required.