Zoho Catalyst
v1.0.0Zoho Catalyst integration. Manage data, records, and automate workflows. Use when the user wants to interact with Zoho Catalyst data.
⭐ 0· 58·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Zoho Catalyst integration) match the instructions: the SKILL.md consistently explains how to use the Membrane CLI to connect to and proxy requests to Zoho Catalyst. The requirement of a Membrane account and network access is expected for that design.
Instruction Scope
All runtime instructions focus on installing and using the Membrane CLI, creating connections, listing actions, running actions, and proxying requests to Zoho Catalyst. The instructions do not ask the agent to read unrelated files, access unrelated env vars, or exfiltrate data to unexpected endpoints.
Install Mechanism
The SKILL.md suggests installing @membranehq/cli via npm (global install). This is a typical distribution channel (public npm) and is proportionate to the CLI usage, but npm packages carry the usual supply‑chain risk; the user should verify the package's publisher and reputation before running a global install.
Credentials
The skill declares no env vars or credentials locally, which matches the guidance to let Membrane handle auth. However, that design routes Zoho credentials and API traffic through Membrane's servers (the skill homepage points to getmembrane.com). Users must trust Membrane with their Zoho account connections and any proxied request data.
Persistence & Privilege
The skill is instruction-only, has always:false, and does not request persistent system privileges or modify other skills. Autonomous invocation by the agent is enabled by default (normal) and not combined with other red flags.
Assessment
This skill is internally consistent: it tells you to install a public Membrane CLI and use it to connect to Zoho Catalyst, and it does not request unrelated credentials or system access. Before installing or using it, consider: 1) vet the @membranehq/cli package and the Membrane service (publisher reputation, GitHub/NPM pages, privacy/security docs) because your Zoho connections and proxied requests will pass through Membrane; 2) prefer running installs in a controlled environment (avoid unexpected global installs on critical machines); 3) never paste raw secrets into chat — use the connection flow the CLI provides (browser auth) as instructed; 4) if you prefer not to route credentials through a third party, you can build a direct Zoho Catalyst integration instead (which would require Zoho credentials/API keys). If you want, I can list specific checks to vet the Membrane npm package and service.Like a lobster shell, security has layers — review code before you run it.
latestvk9791nseyk0hed8mapt0jpm6ds84b1s5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.