Zoho Sheet
v1.0.0Zoho Sheet integration. Manage data, records, and automate workflows. Use when the user wants to interact with Zoho Sheet data.
⭐ 0· 59·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with Zoho Sheet and its runtime instructions exclusively show how to use the Membrane CLI to discover connectors, create connections, run pre-built actions, or proxy raw Zoho API requests. No unrelated services, credentials, or tools are requested.
Instruction Scope
SKILL.md directs only to install and use the Membrane CLI, run membrane commands, and perform browser-based OAuth for connections. It does not instruct reading arbitrary local files, harvesting environment variables, or sending data to unexpected endpoints beyond Membrane/Zoho.
Install Mechanism
This is an instruction-only skill (no install spec), but it recommends installing @membranehq/cli via npm (global install) and using npx. Installing an npm CLI is a reasonable and expected step, but it carries the normal risk of running third-party code from npm; validate the package and source before installing globally.
Credentials
The skill declares no required environment variables or credentials and explicitly advises against asking users for API keys, relying on Membrane to manage auth. The scope of requested access (a Membrane account and browser-based OAuth to connect Zoho) is proportional to the stated purpose.
Persistence & Privilege
The skill is not marked always:true and does not request elevated system persistence. Model invocation is allowed (platform default), which is expected for a user-invocable integration; nothing here amplifies that privilege.
Assessment
This skill appears coherent: it uses Membrane to manage auth and talk to Zoho Sheet. Before installing or using it: (1) verify the @membranehq/cli npm package and its publisher (avoid installing packages from unknown sources globally), (2) confirm the Membrane account and connector flows in a controlled environment so you can review scopes granted to Zoho, and (3) avoid providing any unrelated secrets to the skill. If you want extra assurance, run membrane CLI commands locally yourself first and review the connector output and consent screens before enabling agent automation.Like a lobster shell, security has layers — review code before you run it.
latestvk97ay7g0wkcmhqpktb4e4fktyd8489pj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.