Upbooks

UpBooks integration. Manage data, records, and automate workflows. Use when the user wants to interact with UpBooks data.

This skill is coherent but depends on the third-party Membrane service and CLI. Before installing or using it: (1) verify the @membranehq CLI package and the getmembrane.com / GitHub links to ensure you trust the publisher; (2) understand that connecting UpBooks will grant Membrane access to your accounting data — review the permissions and privacy policy; (3) prefer using npx or a sandboxed environment if you don't want a global npm package installed; (4) during login, only complete authorization flows you initiated and double-check URLs; (5) if you need higher assurance, ask for or inspect a package checksum or review the CLI source on GitHub before installing.

Type: OpenClaw Skill Name: upbooks Version: 1.0.3 The skill facilitates UpBooks integration via the Membrane CLI, requiring high-risk operations like global npm package installation and shell command execution (SKILL.md). It introduces a potential shell injection vulnerability by instructing the agent to pass natural language descriptions directly into CLI commands (e.g., `membrane action create "DESCRIPTION"`). Additionally, the metadata contains a future-dated publication timestamp (1776855082168 in _meta.json). While these behaviors align with the stated integration purpose, the combination of broad shell access and input-handling risks warrants a suspicious classification.