Saleshood
v1.0.0Saleshood integration. Manage data, records, and automate workflows. Use when the user wants to interact with Saleshood data.
⭐ 0· 28·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with Saleshood and all runtime instructions use the Membrane CLI and Membrane connections to reach Saleshood. It does not ask for unrelated credentials or system access, so the requested capabilities are coherent with the stated purpose.
Instruction Scope
SKILL.md limits runtime actions to installing/using the Membrane CLI, creating/listing connections, running actions, and proxying requests through Membrane. It does not instruct reading arbitrary files, scanning local configs, or exfiltrating environment variables beyond what Membrane handles. The only runtime network interaction is with Membrane and the browser-based auth flow, which fits the described workflow.
Install Mechanism
This is an instruction-only skill (no automated install). It tells users to install @membranehq/cli from the npm registry (global npm install or npx). That is a normal approach, but installing/running third-party npm packages executes external code—users should verify the package and its source before installation. There is no download from obscure URLs or automatic extraction performed by the skill itself.
Credentials
The skill declares no required environment variables and explicitly instructs not to ask users for API keys, relying on Membrane to manage credentials. This is proportionate to its purpose. Note: Membrane (the external service) will hold/mediate authentication and will see proxied requests/responses, so trusting Membrane's handling of secrets and data is required.
Persistence & Privilege
The skill does not request persistent automatic inclusion (always:false), does not modify other skills or system-wide settings, and contains no installation hooks. It relies on an external CLI used interactively or via commands the agent runs, which is appropriate for this integration.
Assessment
This skill appears internally consistent but requires installing and trusting the third-party Membrane CLI and using a Membrane account. Before installing or using it: 1) verify the @membranehq/cli package and its GitHub repository (source, recent activity, maintainers) to ensure it is the legitimate project; 2) understand that Membrane will act as a proxy and will see Saleshood data and handle credentials—make sure this fits your privacy/compliance requirements; 3) prefer using npx for ephemeral execution or review the package contents before a global install; 4) use least-privilege connections/accounts for integrations and audit connection activity; 5) if you need greater assurance, ask the publisher for the exact connector ID and sample outputs or test in a sandbox tenant first.Like a lobster shell, security has layers — review code before you run it.
latestvk97fegs0ygn10500d8hnrzpv21848tjp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.