← 返回 Skills 市场

Salesforce

Name: Salesforce
Author: membranedev

作者 Membrane Dev · GitHub ↗ · v1.0.12 · MIT-0

cross-platform ✓ 安全检测通过

491

总下载

当前安装

版本数

在 OpenClaw 中安装

/install salesforce-integration

功能描述

Salesforce integration. Manage crm and marketing automation data, records, and workflows. Use when the user wants to interact with Salesforce data.

安全使用建议

This skill appears to do what it says: it uses the Membrane CLI to connect to Salesforce and operate on records. Before installing or using it, verify the Membrane project and package (https://getmembrane.com and the @membranehq/cli npm package) are legitimate; prefer running the CLI via npx, in a container, or with a non-global install to avoid requiring system-wide write access; use a test Salesforce account or least-privilege account for initial setup; confirm the OAuth consent screen and scopes presented during login; and be aware that the CLI will store tokens/config locally. If you cannot or do not want to install third-party CLIs, do not install this skill.

功能分析

Type: OpenClaw Skill Name: salesforce-integration Version: 1.0.12 The skill provides a legitimate integration for Salesforce using the Membrane CLI. The instructions in SKILL.md guide the agent through standard authentication, record management, and API interaction processes consistent with CRM automation. There is no evidence of data exfiltration, malicious command execution, or harmful prompt injection.

能力标签

requires-oauth-tokenrequires-sensitive-credentials

能力评估

✓ Purpose & Capability

The skill declares Salesforce integration and instructs the agent to use the Membrane CLI to authenticate and operate on Salesforce objects. Required capabilities (network access, a Membrane account, and installing @membranehq/cli) match the stated purpose and are proportionate.

✓ Instruction Scope

SKILL.md confines runtime actions to installing/using the Membrane CLI, authenticating via interactive OAuth flows, creating/monitoring connections, and listing/executing actions against Salesforce. It does not instruct reading unrelated system files or environment variables. It does instruct polling connection state and using JSON output for machine-readable responses.

ℹ Install Mechanism

There is no platform install spec in the registry, but the instructions tell users to run `npm install -g @membranehq/cli@latest` (a public npm package). Installing a global npm package is a reasonable requirement for a CLI-driven integration, but global npm installs run package scripts and require elevated write access (system/global node_modules), so users should verify the package and prefer isolated environments (npx, containers, or user-level installs) if concerned.

✓ Credentials

The skill does not require environment variables or credentials in the registry metadata. Authentication is handled interactively via the Membrane CLI and OAuth in the user's browser, which is appropriate for accessing Salesforce. There are no unexplained credential requests in SKILL.md.

ℹ Persistence & Privilege

always:false and normal agent invocation are used (expected). Installing and using the Membrane CLI will create local configuration and persist tokens/connection metadata on the host (normal for a CLI). If you want to avoid local persistence, run the CLI in an isolated environment or use ephemeral credentials.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install salesforce-integration
安装完成后，直接呼叫该 Skill 的名称或使用 /salesforce-integration 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.12