Agile Crm
ReviewAudited by ClawScan on May 10, 2026.
Overview
This appears to be a normal Agile CRM integration, but it uses Membrane login and can change or delete CRM records, so users should control sensitive actions carefully.
Before installing, make sure you trust the Membrane CLI source and are comfortable granting it access to your Agile CRM account. Use the skill for specific CRM tasks, and confirm any update or delete operation before it runs.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An agent using this skill could create, update, or delete CRM records if instructed or if it misinterprets a request.
The skill exposes CRM mutation and deletion actions. This is aligned with the stated CRM-management purpose, but these operations can materially change business data.
| Create Contact | ... | Update Deal | ... | Delete Contact | delete-contact | Delete a contact by ID |
Use explicit record IDs and parameters, and require confirmation before update or delete actions.
The skill may operate with the permissions granted to the connected Membrane/Agile CRM account.
The integration relies on authenticated Membrane/Agile CRM access and ongoing credential refresh. This is expected for the service, but it grants delegated account access.
Membrane handles authentication and credentials refresh automatically
Authenticate only to the intended account, review granted scopes where possible, and revoke the connection when it is no longer needed.
Installing a global CLI runs third-party package code on the local machine, and @latest can change over time.
The skill asks the user to install a global npm CLI using the moving @latest version. This is purpose-aligned setup, but it is not version-pinned.
npm install -g @membranehq/cli@latest
Install only from the trusted Membrane package source, consider pinning a known version, and keep normal npm supply-chain precautions.