Zoho Bookings
v1.0.0Zoho Bookings integration. Manage data, records, and automate workflows. Use when the user wants to interact with Zoho Bookings data.
⭐ 0· 57·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's stated purpose (Zoho Bookings integration) matches the instructions, which rely on the Membrane platform to access Zoho Bookings. However, the registry metadata claims no required binaries or credentials while the SKILL.md explicitly requires the Membrane CLI and a Membrane account — a small metadata mismatch.
Instruction Scope
SKILL.md stays on-topic: it instructs installing/using the Membrane CLI, performing Membrane login, creating a connection, listing actions, running actions, or proxying Zoho Bookings API calls through Membrane. It does not instruct reading arbitrary local files or environment variables beyond the CLI auth flow. Note: proxying requests via Membrane means request payloads and responses transit Membrane's service.
Install Mechanism
The skill is instruction-only and asks users to install @membranehq/cli via npm (or use npx). This is a normal, moderate-risk instruction (npm packages execute code during install). The registry lacks an explicit install spec or a required-binaries declaration despite the CLI dependency.
Credentials
No environment variables or unrelated credentials are requested. Authentication is delegated to Membrane's browser-based flow; the skill explicitly advises against asking users for API keys. Requiring a Membrane account is proportional to the described functionality.
Persistence & Privilege
The skill does not request always:true or other elevated persistence. It instructs the user to log in to the Membrane CLI, which will store credentials locally per the CLI's normal behavior — this is expected for this workflow.
Assessment
This skill is basically a how-to for using the Membrane CLI to access Zoho Bookings. Before using it: (1) verify you trust Membrane/getmembrane.com and the @membranehq/cli package (review the project and its permissions); (2) prefer running actions via npx if you do not want a global npm install; (3) remember that proxied requests and any booking data will transit Membrane's service — review their privacy/security policy and the connector's permissions before authorizing; and (4) note the small registry omission: the SKILL.md requires a CLI and a Membrane account even though the metadata did not list required binaries or credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk9735zz4y0b46f8ewkjz7fp1z584aph3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
