Klenty
v1.0.2Klenty integration. Manage Persons, Organizations, Deals, Leads, Pipelines, Activities and more. Use when the user wants to interact with Klenty data.
⭐ 0· 89·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The SKILL.md describes a Klenty integration and consistently instructs the agent/user to use the Membrane CLI to call Klenty APIs and run pre-built actions. Using a third-party proxy (Membrane) to access Klenty is a plausible design choice and matches the stated purpose.
Instruction Scope
Runtime instructions are specific: install @membranehq/cli, log in (interactive or headless), create/list connections, list actions, run actions, or proxy raw requests. The instructions do not ask the agent to read unrelated local files or export secrets; they do require network access and interactive authentication via browser or headless token completion.
Install Mechanism
The skill has no formal install spec but instructs users to run `npm install -g @membranehq/cli` (a public npm package). This is a moderate-risk install path because it writes a global binary to disk and executes external code, and the skill metadata does not declare the membrane CLI as a required binary. The instruction-only nature reduces some risk, but users should verify the CLI package and prefer installing in a controlled environment (or inspect package contents) before global installation.
Credentials
No environment variables or secrets are requested by the skill; authentication is delegated to Membrane via an interactive login flow. That is proportionate for a connector-based integration. The SKILL.md explicitly advises not to ask users for API keys, which is appropriate.
Persistence & Privilege
The skill does not request always:true, has no declared persistent system modifications, and does not require access to other skills' configs. Autonomous invocation is allowed (platform default) but not combined with any elevated privileges.
Assessment
This skill is internally consistent: it uses Membrane as a proxy to interact with Klenty and does not ask for unrelated credentials. Before installing or running it: 1) Be aware you will be asked to install the @membranehq/cli globally (npm -g), which will add a binary to your system — consider installing in a sandboxed environment or inspecting the package first. 2) The CLI login opens a browser (or uses a headless URL/code flow) — ensure you trust Membrane and are comfortable granting it access to Klenty on your behalf. 3) Verify the connector and actions returned by `membrane action list` before running actions that modify data. 4) If you prefer not to install third‑party CLIs globally, run the CLI in a container or use a vetted runtime that limits system exposure.Like a lobster shell, security has layers — review code before you run it.
latestvk973pv611v0ysnzrjtkmtf9nxd842mje
License
MIT-0
Free to use, modify, and redistribute. No attribution required.