Erpnext
v1.0.2ERPNext integration. Manage Companies. Use when the user wants to interact with ERPNext data.
⭐ 0· 153·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description match the instructions: the skill uses Membrane to interact with ERPNext (listing, getting, creating/updating documents). Required capabilities (network access, Membrane account) are appropriate for this purpose.
Instruction Scope
SKILL.md instructs running the Membrane CLI (search/connect/action/request commands) and describes headless login flows. It does not ask for unrelated files or credentials. It does, however, rely on installing/using npm and the membrane CLI even though the registry metadata lists no required binaries.
Install Mechanism
There is no formal install spec in the registry, but the instructions tell the user to run `npm install -g @membranehq/cli`. Installing a global npm package is a moderate-risk operation (downloads code from the npm registry). The SKILL.md does not pin a version or provide an alternative vetted install source.
Credentials
The skill does not request environment variables or secrets in the registry metadata. Authentication is delegated to Membrane (browser-based login). No unexplained credential access is requested.
Persistence & Privilege
always is false and the skill does not request elevated or persistent agent-wide privileges. Normal autonomous invocation is allowed (platform default).
Assessment
This skill appears to do what it claims: it expects you to use the Membrane CLI to talk to ERPNext. Before installing/using it: 1) Verify you trust the Membrane project (@membranehq) and its npm package (consider checking the package page, versions, and maintainers). 2) Be aware `npm install -g` modifies your system PATH—prefer installing in a container or isolated environment if you have doubts. 3) The SKILL.md assumes node/npm and the membrane CLI are available even though the registry metadata doesn't list required binaries—ensure you have those tools and understand their auth flows. 4) The Membrane proxy can send arbitrary requests to your ERPNext instance; limit the Membrane account's permissions and review which connections you create. 5) If you need higher assurance, ask the publisher for a signed release, pinned CLI version, or an official install spec/repository link before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk971181cfwkmybgkge5s8tkf158423rm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.