Zoho Inventory

Zoho Inventory integration. Manage data, records, and automate workflows. Use when the user wants to interact with Zoho Inventory data.

This skill appears consistent with a Zoho Inventory integration that relies on the Membrane CLI. Before installing/using it: 1) Understand you are trusting the Membrane service and its CLI with access to your Zoho data — review Membrane's privacy/terms and the connection permissions. 2) Prefer using npx (examples already use npx) or inspect the @membranehq/cli package and publisher on npm/GitHub before running an npm -g install, since global CLI installs execute third-party code on your machine. 3) Create a least-privilege or sandboxed Membrane connection/account for production data, and check audit logs for connections/actions. 4) If you need higher assurance, verify the CLI's source repo, release signatures, and the getmembrane.com / github.com/membranedev repository mentioned in SKILL.md.

Type: OpenClaw Skill Name: zoho-inventory-integration Version: 1.0.3 The skill instructions in SKILL.md direct the AI agent to perform high-risk operations, including global software installation (npm install -g @membranehq/cli) and shell-based interaction with a third-party platform (getmembrane.com). While these actions are plausibly needed for the stated purpose of Zoho Inventory integration and the instructions include security best practices (e.g., avoiding direct API key handling), the requirement for broad shell/network access and the ability to dynamically create and run remote actions (membrane action create/run) meet the threshold for a suspicious classification. Additionally, the _meta.json file contains a future-dated timestamp (May 2026).