Pidj

Pidj integration. Manage Persons, Organizations, Deals, Leads, Projects, Activities and more. Use when the user wants to interact with Pidj data.

This skill is coherent: it relies on the Membrane CLI to talk to Pidj and asks users to authenticate via the CLI/browser flow rather than asking for raw API keys. Before installing or running the CLI, verify you trust the provider (getmembrane.com and the @membranehq npm package). Installing a global npm package or using npx will execute code from the npm registry — prefer to inspect the package/repo or run in a controlled environment. Also understand that using Membrane means your Pidj data and tokens will be managed by Membrane's service (server-side); if you have strict data control requirements, review Membrane's documentation and privacy/security policies first.

Type: OpenClaw Skill Name: pidj Version: 1.0.3 The skill requires the agent to perform high-risk system operations, specifically installing a global NPM package (`@membranehq/cli`) and executing authentication flows through an external third-party platform (Membrane). While these actions are aligned with the stated purpose of integrating with the Pidj service (pidj.co), the reliance on an external CLI for credential management and the requirement for global installation (npm install -g) represent a significant security risk for an automated agent. No explicit malicious intent was found, but the operational pattern is high-risk.