Ometria
v1.0.2Ometria integration. Manage Persons, Organizations, Deals, Pipelines, Activities, Notes and more. Use when the user wants to interact with Ometria data.
⭐ 0· 112·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the runtime instructions: the SKILL.md describes interacting with Ometria via the Membrane CLI (listing actions, running actions, proxying API requests). The declared requirements (network + Membrane account) are appropriate for this purpose.
Instruction Scope
Instructions tell the agent to install and use the Membrane CLI, perform login via browser, create connections, run actions, and proxy direct API requests through Membrane. This stays within the stated Ometria-integration scope, but it does direct requests to the external Membrane service (which will hold Ometria credentials and see proxied requests)—a privacy/trust consideration rather than an incoherence.
Install Mechanism
Install is an npm global package: `npm install -g @membranehq/cli`. That's a standard mechanism for CLI tools but carries the usual npm-global risks (code installed on the host). No obscure downloads or extract URLs are used.
Credentials
The skill declares no required environment variables or local credentials and explicitly instructs to let Membrane handle auth. No unrelated secrets or config paths are requested.
Persistence & Privilege
Skill is instruction-only, has no install script in the skill bundle, does not request always: true, and does not attempt to modify other skills or system-wide agent settings.
Assessment
This skill appears coherent: it uses Membrane as a proxy to access Ometria and asks you to install the @membranehq/cli npm package and log in via browser. Before installing, verify the Membrane CLI package and project (npm page and GitHub repo) are official and match the homepage/repository in the SKILL.md. Understand that Membrane will store/handle your Ometria credentials and will see proxied API traffic—only proceed if you trust Membrane or use a least-privileged/test account. Installing a global npm package runs code on your machine; prefer installing in a sandbox/container if you have doubts. The skill does not request unrelated secrets or system access.Like a lobster shell, security has layers — review code before you run it.
latestvk9711b15wews3jkc9amabejr8d843adc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.