Monday

Monday integration. Manage project management data, records, and workflows. Use when the user wants to interact with Monday data.

This skill is coherent for interacting with Monday.com via the Membrane CLI. Before installing or using it: (1) Verify the @membranehq/cli npm package and the Membrane service (getmembrane.com) are legitimate and acceptable for your environment, since installing the CLI downloads and runs code from npm. (2) Understand that you'll authenticate via Membrane and grant it access to your Monday account—review the permissions and use a least-privilege account if possible. (3) If you have strict policies about global npm installs, run the CLI in a controlled environment (container, dedicated machine, or use npx) instead of installing globally. (4) If you need greater assurance, check the Membrane CLI source (repository referenced in SKILL.md) to confirm behavior.

Type: OpenClaw Skill Name: monday-integration Version: 1.0.5 The skill facilitates integration with Monday.com by instructing the agent to install a global npm package (@membranehq/cli) and route all API traffic through a third-party proxy service (getmembrane.com). While these actions are aligned with the stated purpose of using the Membrane platform, they represent significant supply-chain and data-privacy risks (intermediary access to project management data). No evidence of explicit malicious intent, such as credential theft or unauthorized exfiltration to unrelated domains, was found in SKILL.md or _meta.json.