Team Up

Team Up integration. Manage Organizations. Use when the user wants to interact with Team Up data.

This skill appears to do what it says: it instructs the agent to use the Membrane CLI to connect and run Team Up actions. Before installing, note: (1) you need Node/npm or npx available — the SKILL.md tells you to run 'npm install -g' and use npx but the registry metadata didn't declare that dependency; (2) installing the CLI will download code from npm and add global binaries to your system; (3) authentication uses Membrane (browser-based or headless code flow), so Membrane will hold the Team Up connection credentials server-side — review Membrane's privacy/security and the linked repository if you need to confirm trust; (4) the skill does not request local API keys or system secrets, and instructions stay on-topic. If you are uncomfortable with installing global npm packages or with Membrane holding your connectors, don't install or ask for an alternative integration path.

Type: OpenClaw Skill Name: team-up Version: 1.0.3 The skill (SKILL.md) requires high-risk operations including global npm package installation (@membranehq/cli) and shell command execution for authentication and API interaction. It also features a dynamic action creation capability ('membrane action create') that could be leveraged for unintended code execution via prompt injection. While these behaviors are aligned with the stated purpose of integrating with the Membrane platform, the reliance on high-privilege shell operations and remote code generation presents a significant attack surface.