Senta
v1.0.2Senta integration. Manage Organizations, Activities, Notes, Files, Pipelines, Users and more. Use when the user wants to interact with Senta data.
⭐ 0· 86·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (Senta CRM integration) matches the instructions: the skill delegates interaction to the Membrane CLI which proxys requests to Senta and provides actions for common resources. No unrelated credentials or binaries are requested.
Instruction Scope
SKILL.md instructs installing and using the Membrane CLI, logging in via browser or headless flow, listing/connecting actions, and proxying arbitrary HTTP requests to Senta through Membrane. This stays within the integration purpose, but proxying arbitrary API paths means the agent could send arbitrary data to Senta (or through Membrane) if prompted — that is expected for a proxy-based integration but worth noting.
Install Mechanism
No platform install spec is provided (instruction-only), but the doc tells users to run `npm install -g @membranehq/cli`. That is a standard public npm package but would modify the environment (global install). Because the skill itself doesn't auto-install, the agent/platform won't automatically fetch code; the user/agent would need to run these commands manually. This is reasonable but has moderate operational impact.
Credentials
The skill declares no required env vars and relies on Membrane to manage credentials via interactive login. That is proportional to the stated purpose. Note: Membrane CLI will store and manage the user's auth tokens/credentials locally — the skill relies on that behavior implicitly.
Persistence & Privilege
The skill does not request always:true and is user-invocable; it does not ask to modify other skills or system-wide settings. Autonomous invocation is allowed by default but not an additional privilege here.
Assessment
This skill appears to be what it claims (a Membrane-based Senta integration) and is instruction-only. Before installing/using: (1) verify you trust @membranehq/cli (review its npm page and repository) because the CLI will handle and store your auth tokens; (2) prefer installing the CLI only in environments you control — a global npm install modifies the system; (3) verify the source links — SKILL.md contains an odd "Official docs" link to a different project (github.com/baidu/Senta) which looks like a copy/paste error; confirm the correct Senta API docs and the repo referenced in the YAML; (4) be aware that the Membrane proxy can send arbitrary API requests to Senta, so avoid sending highly sensitive data unless you trust the Membrane service and have read its privacy/security docs. If you want higher confidence, ask the publisher for the canonical repository or a signed publisher identity and/or inspect the Membrane CLI code and its handling/storage of credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk975x95s11varhw4j3s2hfjcnh84329k
License
MIT-0
Free to use, modify, and redistribute. No attribution required.