Zoho Subscriptions
v1.0.0Zoho Subscriptions integration. Manage data, records, and automate workflows. Use when the user wants to interact with Zoho Subscriptions data.
⭐ 0· 31·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name and description match the SKILL.md: it integrates Zoho Subscriptions via Membrane. One minor inconsistency: registry metadata lists no required binaries, but the runtime instructions require installing the Membrane CLI via npm (so Node/npm must be present). Otherwise the requested capabilities are proportional to the stated purpose.
Instruction Scope
Instructions are limited to installing the Membrane CLI, logging in, creating connections, listing/running actions, and proxying requests to Zoho via Membrane. They do not instruct reading unrelated local files or environment variables. Important privacy/attack surface note: API requests and credentials are handled by the Membrane service, so using this skill will send request data and authentication flows through Membrane's servers (getmembrane.com).
Install Mechanism
There is no automated install spec in the registry (instruction-only). The SKILL.md recommends a global npm install of @membranehq/cli — a standard but potentially privileged operation (global npm installs execute package install scripts). This is a moderate-risk choice you must explicitly consent to; the registry metadata should have declared Node/npm as required but did not.
Credentials
The skill requests no local environment variables or credentials and delegates auth/storage to Membrane. That is proportionate to the integration purpose. The main operational requirement is a Membrane account and network access.
Persistence & Privilege
No 'always: true' or elevated privileges are requested. The skill is user-invocable only and instruction-only (no code written to disk by the registry). Installing the Membrane CLI is a separate, user-initiated step.
Assessment
This skill appears to do what it claims: it uses the Membrane CLI to proxy Zoho Subscriptions API calls and to manage auth for you. Before installing or using it: 1) Be aware that using the skill routes requests and credentials through Membrane's servers (getmembrane.com) — verify you trust that service and review its privacy/security docs and terms. 2) The SKILL.md expects you to run `npm install -g @membranehq/cli` but the registry didn't list Node/npm as a required binary — ensure Node/npm is installed and verify the @membranehq/cli package (author, version, and npm page) before a global install. 3) If you prefer lower risk, consider installing the CLI locally (npx or a per-project install) rather than globally, or review the CLI repository and release authenticity on GitHub. 4) If you need stronger guarantees, ask the skill author for a declaration of required binaries and a link to Membrane's security practices; absence of code files means there is little else to inspect locally.Like a lobster shell, security has layers — review code before you run it.
latestvk97dy09fhnc6wnbcjk648aznth846dma
License
MIT-0
Free to use, modify, and redistribute. No attribution required.