Nocrmio
v1.0.2NoCRM.io integration. Manage Leads, Persons, Organizations, Activities, Notes, Files and more. Use when the user wants to interact with NoCRM.io data.
⭐ 0· 229·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (NoCRM.io integration) matches the instructions (use Membrane to run actions and proxy API requests). However, the skill instructs users to install and run the Membrane CLI (and implicitly requires npm and a browser for login) but the registry metadata lists no required binaries or environment variables — a mild documentation/manifest inconsistency.
Instruction Scope
SKILL.md stays focused on interacting with NoCRM.io through Membrane CLI and the NoCRM API proxy. It does not instruct the agent to read unrelated files or exfiltrate arbitrary data and explicitly advises not to ask users for API keys.
Install Mechanism
The instructions ask the user to run `npm install -g @membranehq/cli` (a public npm package). This is a standard, traceable install method but modifies the system (global npm install) and requires npm and appropriate permissions; these required tools are not declared in the manifest.
Credentials
The skill does not request environment variables or credentials in the registry metadata; SKILL.md relies on Membrane to manage auth server-side and explicitly recommends creating connections instead of asking for API keys locally. That is proportionate to the stated purpose.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It is instruction-only and does not modify other skills or system-wide settings.
Assessment
This skill appears to do what it says: it delegates NoCRM.io traffic to the Membrane platform via the Membrane CLI. Before installing: verify you trust the Membrane project and the npm package (@membranehq/cli) by checking the package page and GitHub repo; be aware `npm install -g` will write to your system and may require admin rights; the CLI login opens a browser (or uses a pasted code) and creates a connection that lets Membrane hold auth on your behalf—confirm Membrane's data/credential handling and privacy policy if you care about where tokens are stored. Because the skill's manifest didn't list npm or the membrane CLI as required binaries, double-check that your environment has npm and that you want to install a global CLI before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk974a1jdt8y3sjkx370rb69mr18433jm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.