Zendesk Sunshine
v1.0.0Zendesk Sunshine integration. Manage data, records, and automate workflows. Use when the user wants to interact with Zendesk Sunshine data.
⭐ 0· 59·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Zendesk Sunshine integration) match the instructions: all runtime steps use the Membrane CLI to discover actions, run actions, and proxy API requests to Zendesk Sunshine. Asking the user to install @membranehq/cli is coherent with the described functionality.
Instruction Scope
Instructions are narrowly scoped to installing and using the Membrane CLI, performing OAuth-style login (browser flow or headless completion), listing/connecting connectors, running actions, and proxying requests. They do not instruct reading local files or env vars. Important privacy/security note: proxying via Membrane means API requests and auth headers will transit Membrane's servers — the skill explicitly relies on that behavior.
Install Mechanism
This is an instruction-only skill (no install spec), but it tells users to run `npm install -g @membranehq/cli` (and sometimes suggests `npx`). Installing a global npm package executes code from the npm registry and modifies the host environment — expected for a CLI integration but a tangible risk the user should vet (package source, version, and trust in Membrane).
Credentials
The skill declares no required env vars or credentials and explicitly instructs not to ask users for Zendesk API keys, instead using Membrane-managed connections and browser-based login. That is proportional, though it does require a Membrane account (stated in metadata).
Persistence & Privilege
The skill is not always-enabled and does not request persistent system privileges or attempt to modify other skills or agent-wide configuration. Autonomous invocation remains allowed (platform default) but is not combined with other high privileges.
Assessment
This skill appears to do what it says: it uses the Membrane CLI to talk to Zendesk Sunshine and does not ask for unrelated credentials. Before installing/using it: 1) Confirm you trust the Membrane service and @membranehq/cli package (review their site, repo, and package publisher). 2) Prefer `npx` or an ephemeral install if you don't want a global CLI installed. 3) Understand that API requests and authentication tokens will be proxied through Membrane servers — consider privacy and compliance implications for your data. 4) Use least-privilege connections in Membrane and avoid pasting secrets into chat; follow your org's policy for third-party integrations.Like a lobster shell, security has layers — review code before you run it.
latestvk97e0r4szp4d3rg3dsph00xmjh845h3b
License
MIT-0
Free to use, modify, and redistribute. No attribution required.