Zoho People
v1.0.0Zoho People integration. Manage data, records, and automate workflows. Use when the user wants to interact with Zoho People data.
⭐ 0· 53·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Zoho People integration) matches the instructions: all operations are routed through the Membrane CLI to manage Zoho People data. Required capabilities (network access, Membrane account, Membrane CLI) are appropriate for this purpose.
Instruction Scope
SKILL.md only instructs the agent/operator to install and use the Membrane CLI, create/list connections, discover actions, run actions, and optionally proxy requests to Zoho People. It does not instruct reading unrelated local files or pulling other credentials. The proxy capability can issue arbitrary Zoho People API requests, which is expected for this integration.
Install Mechanism
The skill is instruction-only and asks the user to install @membranehq/cli via npm -g. This is a common install method but carries the usual npm/global-package risks (supply-chain or publisher trust). No hidden downloads or obscure URLs are used in the instructions.
Credentials
The skill declares no required environment variables or credentials and explicitly advises letting Membrane handle credentials rather than storing API keys locally. That is proportionate to its stated function. Be aware that the Membrane account/connection will hold Zoho People credentials on the Membrane side.
Persistence & Privilege
The skill is not marked always:true, does not request system-level config changes in the SKILL.md, and is user-invocable by default. There is no instruction to modify other skills or global agent config beyond using the Membrane CLI.
Assessment
This skill is coherent: it delegates Zoho People access to the Membrane platform and tells you how to use the Membrane CLI. Before installing/using it: (1) Verify the @membranehq/cli package publisher and the package version you install (npm -g installs globally). (2) Confirm you trust Membrane (https://getmembrane.com) because connections you create will cause Membrane to hold and refresh Zoho People credentials and can proxy arbitrary API requests. (3) Review connector scopes/permissions in the browser consent screen when you authenticate a connection to limit access where possible. (4) Prefer running the CLI in a controlled environment (not an unrelated server) and avoid pasting secrets into commands. If you need higher assurance, inspect the Membrane CLI repository and the referenced GitHub repo before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk97cec051kxy0dt0v12qvn20ys84cz3b
License
MIT-0
Free to use, modify, and redistribute. No attribution required.