Sendoso
v1.0.2Sendoso integration. Manage Persons, Organizations, Deals, Leads, Projects, Activities and more. Use when the user wants to interact with Sendoso data.
⭐ 0· 116·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Sendoso integration) matches the instructions: everything is about using Membrane to connect to Sendoso, list actions, run actions, or proxy requests. There are no unrelated credential requests or stray capabilities.
Instruction Scope
SKILL.md only instructs the agent/operator to install and use the Membrane CLI, perform login/connection steps, list and run actions, and optionally proxy to the Sendoso API. It does not instruct reading other files, scanning system state, or exfiltrating unrelated data.
Install Mechanism
This is an instruction-only skill that asks the user to run `npm install -g @membranehq/cli`. That is a standard public npm package install (moderate supply-chain risk). No obscure download URLs or archive extraction are required, but installing a global CLI is an external action the user must evaluate.
Credentials
No environment variables, credentials, or config paths are requested by the skill. The SKILL.md explicitly advises letting Membrane handle auth rather than asking the user for API keys, which is proportionate to the stated purpose.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It does not instruct modifying other skills or system-wide configs. Autonomous invocation is allowed by default but not combined with other red flags.
Assessment
This skill is coherent: it uses the Membrane CLI to interact with Sendoso rather than asking for raw API keys. Before installing or using it, verify the @membranehq/cli package is the official package (check the package page and repository), confirm your organization is comfortable granting Membrane access to your Sendoso account (Membrane will handle auth server-side), and follow your org policy about installing global npm CLIs (supply-chain / admin approval). If you prefer not to install a global CLI, ask for an alternative integration approach or a vetting link to the official Membrane docs/repository.Like a lobster shell, security has layers — review code before you run it.
latestvk97deq59yehh42svymnz5n3gvx842y1s
License
MIT-0
Free to use, modify, and redistribute. No attribution required.