Onedesk
v1.0.2OneDesk integration. Manage Organizations. Use when the user wants to interact with OneDesk data.
⭐ 0· 96·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (OneDesk integration) matches the instructions which exclusively use the Membrane CLI to connect to OneDesk, list actions, run actions, and proxy API requests. There are no unrelated required env vars, binaries, or config paths.
Instruction Scope
SKILL.md only instructs use of the membrane CLI (install, login, connect, action list/run, request proxy). It does not tell the agent to read arbitrary files, harvest system credentials, or transmit data to unexpected third parties. It does rely on opening a browser for auth or copying an auth code in headless flows, which is consistent with OAuth-style connectors.
Install Mechanism
There is no platform install spec, but the docs ask users to install @membranehq/cli via npm (or use npx). This is a standard registry install (moderate trust surface). Recommend verifying the npm package publisher and preferring npx to avoid a global install if you want lower system impact.
Credentials
The skill declares no required environment variables or credentials. All credential handling is delegated to Membrane connections, which is proportionate for a connector-style integration.
Persistence & Privilege
The skill is not always-enabled and does not request elevated persistent privileges or modification of other skills. Model invocation is allowed (platform default); nothing in the skill itself inappropriately escalates presence.
Assessment
This skill appears internally consistent and is instruction-only: it tells the agent to use the Membrane CLI to access OneDesk. Before installing or using it, verify the @membranehq/cli npm package (publisher, recent versions, and npm page) and prefer using npx to avoid a global install. Understand that using the skill requires a Membrane account and that API calls and auth flows are proxied through Membrane (so data you send to OneDesk will transit Membrane's service). If you need stricter control, review Membrane's privacy/security docs and the connector's requested scopes in your account before authorizing. Finally, because the skill can be invoked by the agent, ensure you only enable it for agents you trust to act on your behalf.Like a lobster shell, security has layers — review code before you run it.
latestvk97cfx1j74xfmqtr5910a72zxx842scn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.