Processplan

ProcessPlan integration. Manage Organizations, Users. Use when the user wants to interact with ProcessPlan data.

This skill appears coherent and does what it says: it uses the Membrane CLI to interact with ProcessPlan. Before installing, consider: (1) you will need a Membrane account and will authorize Membrane to access ProcessPlan on your behalf — review Membrane's privacy/security policies and the permissions granted by the connector; (2) the SKILL recommends installing @membranehq/cli from npm (global install) — prefer using npx or audit the package/version if you want to avoid global installs or reduce supply-chain risk; (3) revoke or remove the Membrane connection if you no longer trust it; and (4) verify the membrane project and package owners (homepage/repo links provided) if you require stronger provenance assurance.

Type: OpenClaw Skill Name: processplan Version: 1.0.3 The skill facilitates ProcessPlan integration by instructing the agent to install the Membrane CLI globally (`npm install -g`) and execute shell commands to manage workflows. While these capabilities are plausibly needed for the stated purpose and the instructions promote secure credential handling (delegating auth to Membrane), the reliance on shell execution for dynamic inputs—such as passing JSON strings in `membrane action run` or descriptions in `membrane action create`—presents a potential command injection surface. No evidence of intentional malice, data exfiltration, or obfuscation was found in SKILL.md or _meta.json.