Zoho Campaigns
v1.0.2Zoho Campaigns integration. Manage data, records, and automate workflows. Use when the user wants to interact with Zoho Campaigns data.
⭐ 0· 100·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description say 'Zoho Campaigns' and the instructions use Membrane (a 3rd-party integration layer) to create connections, run actions, and proxy requests to Zoho. Required capabilities (network access, Membrane CLI) match the stated purpose.
Instruction Scope
SKILL.md only instructs installing/running the Membrane CLI, performing login via browser, creating/choosing a connection, listing actions, running actions, or proxying API calls. It does not ask the agent to read unrelated files, export secrets, or call arbitrary external endpoints beyond Membrane/Zoho.
Install Mechanism
There is no registry-level install spec; the SKILL.md recommends running `npm install -g @membranehq/cli` or using npx. Installing a global npm package runs remote code from the npm registry (moderate risk). This is normal for CLI-based integrations but the user should confirm the package source and signature before installing.
Credentials
The skill declares no env vars or credentials locally. It relies on Membrane to handle authentication server-side; this is proportionate but means Membrane (the third party) will hold/refresh Zoho credentials and will proxy requests, so users must trust that service with their Zoho data/credentials.
Persistence & Privilege
The skill is instruction-only, not always-enabled, and does not request persistent system privileges or alter other skills/config. Autonomous invocation is allowed by default on the platform but is not combined here with elevated privileges.
Assessment
This skill appears coherent: it delegates Zoho auth and API calls to Membrane and gives step-by-step CLI usage. Before installing or using it: (1) verify the Membrane CLI package on npm (publisher, version, checksums) or prefer `npx` to avoid a global install; (2) review Membrane's privacy/security docs because Membrane will store and proxy your Zoho credentials and data; (3) confirm the repository/homepage links are legitimate for the integration; (4) avoid running CLI installs or auth flows on highly sensitive machines until you've validated the third party; and (5) if you prefer not to trust a proxy, consider using Zoho's official API directly with your own controlled credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk975xgfcawazbfrr3165seq6eh843468
License
MIT-0
Free to use, modify, and redistribute. No attribution required.