← Back to Skills Marketplace

Salesforce

Name: Salesforce
Author: membranedev

by Membrane Dev · GitHub ↗ · v1.0.12 · MIT-0

cross-platform ✓ Security Clean

491

Downloads

Stars

Active Installs

Versions

Install in OpenClaw

/install salesforce-integration

Description

Salesforce integration. Manage crm and marketing automation data, records, and workflows. Use when the user wants to interact with Salesforce data.

Usage Guidance

This skill appears to do what it says: it uses the Membrane CLI to connect to Salesforce and operate on records. Before installing or using it, verify the Membrane project and package (https://getmembrane.com and the @membranehq/cli npm package) are legitimate; prefer running the CLI via npx, in a container, or with a non-global install to avoid requiring system-wide write access; use a test Salesforce account or least-privilege account for initial setup; confirm the OAuth consent screen and scopes presented during login; and be aware that the CLI will store tokens/config locally. If you cannot or do not want to install third-party CLIs, do not install this skill.

Capability Analysis

Type: OpenClaw Skill Name: salesforce-integration Version: 1.0.12 The skill provides a legitimate integration for Salesforce using the Membrane CLI. The instructions in SKILL.md guide the agent through standard authentication, record management, and API interaction processes consistent with CRM automation. There is no evidence of data exfiltration, malicious command execution, or harmful prompt injection.

Capability Tags

requires-oauth-tokenrequires-sensitive-credentials

Capability Assessment

✓ Purpose & Capability

The skill declares Salesforce integration and instructs the agent to use the Membrane CLI to authenticate and operate on Salesforce objects. Required capabilities (network access, a Membrane account, and installing @membranehq/cli) match the stated purpose and are proportionate.

✓ Instruction Scope

SKILL.md confines runtime actions to installing/using the Membrane CLI, authenticating via interactive OAuth flows, creating/monitoring connections, and listing/executing actions against Salesforce. It does not instruct reading unrelated system files or environment variables. It does instruct polling connection state and using JSON output for machine-readable responses.

ℹ Install Mechanism

There is no platform install spec in the registry, but the instructions tell users to run `npm install -g @membranehq/cli@latest` (a public npm package). Installing a global npm package is a reasonable requirement for a CLI-driven integration, but global npm installs run package scripts and require elevated write access (system/global node_modules), so users should verify the package and prefer isolated environments (npx, containers, or user-level installs) if concerned.

✓ Credentials

The skill does not require environment variables or credentials in the registry metadata. Authentication is handled interactively via the Membrane CLI and OAuth in the user's browser, which is appropriate for accessing Salesforce. There are no unexplained credential requests in SKILL.md.

ℹ Persistence & Privilege

always:false and normal agent invocation are used (expected). Installing and using the Membrane CLI will create local configuration and persist tokens/connection metadata on the host (normal for a CLI). If you want to avoid local persistence, run the CLI in an isolated environment or use ephemeral credentials.

How to Use

Make sure OpenClaw is installed (local or Docker)
Run the install command in chat: /install salesforce-integration
After installation, invoke the skill by name or use /salesforce-integration
Provide required inputs per the skill's parameter spec and get structured output

Version History

v1.0.12