Zoho Calendar
v1.0.2Zoho Calendar integration. Manage data, records, and automate workflows. Use when the user wants to interact with Zoho Calendar data.
⭐ 0· 49·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description = Zoho Calendar integration. The instructions only require the Membrane CLI and a Membrane account to create a Zoho connection and run actions — these are coherent and expected for a connector wrapper.
Instruction Scope
SKILL.md only instructs installing the Membrane CLI, logging in (browser-based or headless flow), creating/using a connection, listing and running actions, and optionally proxying requests through Membrane. It does not tell the agent to read unrelated files, environment variables, or to exfiltrate data to unexpected endpoints.
Install Mechanism
No install spec included in the skill bundle (instruction-only). The docs instruct users to run `npm install -g @membranehq/cli` (global npm install). That is a normal way to install a CLI but is a platform-side action that installs third-party code from npm — moderate risk only insofar as you must trust the npm package and the publisher.
Credentials
The skill declares no required environment variables or credentials. The SKILL.md explicitly instructs not to ask users for API keys and to let Membrane handle auth server-side. This is proportionate to a connector-style skill.
Persistence & Privilege
Skill is instruction-only, always:false, and does not request persistent platform privileges or attempt to modify other skills or global agent settings.
Assessment
This skill is coherent: it expects you to install and use the Membrane CLI and to authenticate via Membrane to access Zoho Calendar. Before installing, verify you trust the Membrane project and the npm package (@membranehq/cli) because installing a global CLI runs third-party code on your machine. Also note that Membrane will act as the proxy and will hold the Zoho connection credentials server-side — ensure this aligns with your privacy/compliance requirements. If you prefer not to install a global package or to give a third party a connector, consider using Zoho's official API directly or reviewing Membrane's security/privacy docs and the npm package source on GitHub.Like a lobster shell, security has layers — review code before you run it.
latestvk972pxyahn5fsf9tecfnzwnxrs842594
License
MIT-0
Free to use, modify, and redistribute. No attribution required.