Zoho Meeting
v1.0.2Zoho Meeting integration. Manage data, records, and automate workflows. Use when the user wants to interact with Zoho Meeting data.
⭐ 0· 70·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The SKILL.md describes Zoho Meeting operations and consistently instructs the use of the Membrane CLI as the integration layer. One minor mismatch: the registry metadata lists no required binaries, but the instructions require installing the @membranehq/cli (npm) — this is an omission in metadata rather than malicious behavior.
Instruction Scope
Instructions are limited to installing/using the Membrane CLI, creating connections, listing/running actions, and proxying requests through Membrane. The instructions do not ask the agent to read unrelated files, environment variables, or send data to unknown endpoints. Authentication is performed via browser OAuth handled by Membrane.
Install Mechanism
This is an instruction-only skill (no install spec in registry). It asks the user to install @membranehq/cli via npm (npm install -g) or use npx — a common, expected mechanism. This is moderate-risk only in the usual sense of installing a public npm package; there are no downloads from untrusted URLs or archives in the instructions.
Credentials
The skill declares no environment variables or secrets. It relies on Membrane to manage credentials and explicitly advises not to ask users for API keys. Users will need a Membrane account and to complete OAuth in a browser so Membrane can hold/refresh Zoho credentials.
Persistence & Privilege
always is false and the skill does not request special platform-wide privileges. Note: because the skill enables running Membrane actions, an invoked agent (autonomous or user-directed) could perform operations on any Zoho connections you authorize via Membrane — this is expected for an integration but something to be mindful of.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to access Zoho Meeting and does not try to collect unrelated secrets. Before installing/using it: 1) Verify the npm package name (@membranehq/cli) and publisher on the npm registry and prefer using npx if you want to avoid a global install; 2) Review the OAuth scopes and permissions requested when you run membrane login and when you create the Zoho connection — only grant the minimum needed; 3) Confirm you trust Membrane (getmembrane.com / the GitHub repo referenced) because Membrane will hold the credentials and proxy API calls on your behalf; 4) Be aware that an invoked agent could run Membrane actions against any connections you create, so limit agent autonomy or connection scopes if needed; 5) Note the registry metadata omission (no required binaries listed) — it's benign but you may want the publisher to update metadata to declare the CLI dependency.Like a lobster shell, security has layers — review code before you run it.
latestvk97c145gqt5qaysjtx9e9xxbh18426rs
License
MIT-0
Free to use, modify, and redistribute. No attribution required.