Servicenow

Service Now integration. Manage Incidents, Problems, Tasks, Users, Groups. Use when the user wants to interact with Service Now data.

This skill is coherent with its stated purpose, but review a few practical points before installing: 1) The SKILL asks you to install the Membrane CLI (a third‑party global npm package) — verify the package name, publisher (@membranehq), and version against your org policy before installing. 2) Authentication and ServiceNow credentials are handled by Membrane; confirm where credentials and API data will be stored and whether sending ServiceNow data through Membrane is acceptable for your security/compliance constraints. 3) Use least-privilege ServiceNow connections and, if possible, a test tenant or scoped account. 4) Because the skill runs Membrane CLI commands, be cautious in headless/automated environments (follow the headless login flow as documented). If you need deeper assurance, ask the skill author for a provenance statement (source repo tag/release) or perform an independent review of the @membranehq/cli package and the Membrane service.

Type: OpenClaw Skill Name: servicenow-integration Version: 1.0.3 The skill requires high-risk system modifications and relies on a third-party service for dynamic code execution. Specifically, SKILL.md instructs the agent to perform a global package installation ('npm install -g @membranehq/cli') and utilizes a remote service (Membrane) to dynamically generate and execute actions ('membrane action create'). While these capabilities are aligned with the stated purpose of ServiceNow integration via the Membrane platform, the requirement for global system changes and the execution of remotely generated logic represent significant security risks in an automated agent environment. No clear evidence of intentional malice or data exfiltration was found.