Talkdesk
v1.0.2Talkdesk integration. Manage data, records, and automate workflows. Use when the user wants to interact with Talkdesk data.
⭐ 0· 76·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description align with using Membrane to manage Talkdesk data. It reasonably requires a Membrane account and network access. Minor inconsistency: the skill declares no required binaries or primary credential, yet the instructions explicitly require installing and running the @membranehq/cli (and implicitly npm/node).
Instruction Scope
SKILL.md stays on-topic: it instructs how to install and use the Membrane CLI, create/connect a Talkdesk connector, list/run actions, and proxy requests. It does not ask the agent to read unrelated files or exfiltrate data, and explicitly advises not to ask users for Talkdesk API keys.
Install Mechanism
There is no formal install spec in the skill metadata; instead the README instructs users to run `npm install -g @membranehq/cli` (and sometimes uses npx). Installing an npm global package is a moderate-risk action because it pulls code from the public npm registry; the skill should have declared its runtime dependency (membrane CLI / npm/node) in metadata. The lack of an install spec reduces transparency about what will be installed.
Credentials
The skill does not request environment variables or credentials in metadata. It offloads credential management to Membrane (the instructions explicitly recommend creating a connection so Membrane handles auth). This is proportionate to the stated purpose — no unnecessary secrets are requested by the skill itself.
Persistence & Privilege
always is false and model invocation is allowed (default). The skill does not request permanent presence or system-wide changes in its instructions. It relies on the Membrane CLI and the user's Membrane account for auth; no elevated platform privileges are requested by the skill metadata or SKILL.md.
Assessment
This skill is instruction-only and uses the Membrane CLI to access Talkdesk. Before installing/using it: 1) Verify you trust @membranehq/cli and the Membrane service (review their homepage, privacy, and security practices) because the CLI will hold credentials to Talkdesk on your behalf. 2) Be aware the README asks you to install an npm package globally and to run browser-based login flows — ensure you are comfortable installing third-party npm packages. 3) The skill metadata omits required binaries (npm/node and the membrane CLI are needed); expect to install these. 4) If you manage sensitive Talkdesk data, confirm what access the Membrane connector will have and limit scopes where possible. 5) If you want higher assurance, request a formal install spec or vendor provenance (package checksum, official release links, or repository commit) before installing the CLI.Like a lobster shell, security has layers — review code before you run it.
latestvk971shwypnsbbdwxm0nn247vsx842857
License
MIT-0
Free to use, modify, and redistribute. No attribution required.