Zoho Mail
v1.0.0Zoho Mail integration. Manage Mailboxs, Contacts, Tags, Tasks, Notes, Calendars. Use when the user wants to interact with Zoho Mail data.
⭐ 0· 111·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Zoho Mail integration) match the runtime instructions: the skill directs the agent to use the Membrane CLI to create a Zoho Mail connection, list/run actions, and proxy requests. Required capabilities (network and a Membrane account) are appropriate and expected.
Instruction Scope
SKILL.md stays focused on installing Membrane CLI, logging in, creating/using a Zoho Mail connection, listing and running actions, and using the proxy. It does not instruct reading unrelated files, exporting other credentials, or exfiltrating data to unexpected endpoints.
Install Mechanism
The install step is a global npm install (npm install -g @membranehq/cli). This is a common, expected mechanism for CLI distribution but carries the usual npm-global risks (install-time scripts can run). The URL/source is the public npm registry, not a random download — acceptable for purpose but worth user awareness.
Credentials
The skill declares no required environment variables or secrets and relies on Membrane to manage OAuth/token lifecycle. Requesting a Membrane account and network access is proportionate to the described functionality.
Persistence & Privilege
The skill is instruction-only and not always-included; it allows autonomous invocation (platform default). The one persistence impact is installing a global CLI binary (modifies local system path). There is no instruction to modify other skills or system-wide agent configs.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to talk to Zoho Mail. Before installing, consider: (1) you must install @membranehq/cli globally — global npm installs run code at install-time, so review the package or install in a controlled environment if you prefer; (2) the skill requires a Membrane account and network access and will have Membrane act as the OAuth proxy for your Zoho data — verify you trust the Membrane service and its privacy/security posture; (3) if you want to avoid installing global tools on a sensitive machine, run the CLI in a container or sandbox. If you need deeper assurance, ask the publisher for the exact npm package checksum or review the package source on the @membranehq/cli repository before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk97fedm22qysbm78930h6zf7rx83khm8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.