Occasion

Occasion integration. Manage Events, Venues, Users, Orders, Reports. Use when the user wants to interact with Occasion data.

This skill appears coherent with its stated purpose, but before installing: (1) confirm you trust Membrane (https://getmembrane.com) because authentication and connector access are delegated to their service; (2) prefer using 'npx @membranehq/cli' to avoid a global npm install, or review the @membranehq/cli package and its publisher; (3) be prepared that 'membrane login' will open a browser or produce a code for manual entry (headless flows require pasting the code); and (4) understand that once you create a connection, Membrane will hold the credentials to access your Occasion account—only proceed if you are comfortable with that trust model.

Type: OpenClaw Skill Name: occasion Version: 1.0.3 The skill instructions in SKILL.md direct the agent to perform high-risk actions, including the global installation of an NPM package (@membranehq/cli) and the execution of shell commands that incorporate user-defined strings (e.g., the '--intent' and 'DESCRIPTION' parameters). This pattern introduces a potential shell injection vulnerability if the agent does not properly sanitize user input before execution. While these capabilities are plausibly needed for the stated purpose of integrating the Occasion platform via Membrane, the reliance on external CLI execution and global environment modification constitutes a significant security risk.