Zoho Projects
v1.0.0Zoho Projects integration. Manage data, records, and automate workflows. Use when the user wants to interact with Zoho Projects data.
⭐ 0· 91·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description say 'Zoho Projects integration' and the SKILL.md only instructs use of the Membrane CLI to create connections, list/run actions, and proxy Zoho API requests. There are no unrelated env vars, binaries, or config paths requested.
Instruction Scope
Runtime instructions are limited to installing and invoking the Membrane CLI, performing OAuth-style login via browser, creating a connection, listing/ running actions, or proxying API calls through Membrane. The skill does not instruct the agent to read arbitrary files or environment variables, nor to exfiltrate data to unexpected endpoints.
Install Mechanism
This is an instruction-only skill (no install spec), but the SKILL.md tells users to run `npm install -g @membranehq/cli`. Installing a global npm package executes third-party code on the host — normal for a CLI but worth verifying the package's authenticity and trustworthiness before installing system-wide.
Credentials
No environment variables or credentials are requested by the skill; authentication is delegated to Membrane. This is proportionate for a brokered integration. Users should nonetheless be aware that Membrane will hold/mediate Zoho credentials on their behalf.
Persistence & Privilege
Skill is user-invocable only (always: false) and does not request persistent agent-wide privileges or modify other skills. Autonomous model invocation is allowed by default but not combined with other concerning privileges.
Assessment
This skill appears internally consistent and implements a Zoho Projects integration by instructing the user to use the Membrane CLI. Before installing or using it: (1) verify you trust Membrane/getmembrane.com (they will broker and store your Zoho credentials and proxy API requests); (2) review the @membranehq/cli package on npm and/or its GitHub repo to confirm authenticity before running a global npm install; (3) prefer installing/testing the CLI in an isolated environment (container or VM) if you have security concerns; (4) when creating the connection, grant only the minimal scopes needed and review Membrane's privacy/security docs; and (5) if you need enterprise assurance, ask for the skill's source repo or a signed package before deploying widely.Like a lobster shell, security has layers — review code before you run it.
latestvk973cjc60vw1163qr1r378gzvs84h914
License
MIT-0
Free to use, modify, and redistribute. No attribution required.