Xero

Xero integration. Manage accounting data, records, and workflows. Use when the user wants to interact with Xero data.

This skill appears to do what it claims: it uses the Membrane CLI to connect to Xero and run actions. Before installing or using it: 1) Verify the @membranehq/cli npm package and publisher (check the npm page and the project's GitHub/repo) to ensure you’re installing the official CLI. 2) Be aware you will need a Membrane account and that Membrane will store/manage Xero credentials and tokens—review their privacy/security policies. 3) Installing a global npm CLI has system-wide impact; prefer installing in a controlled environment if you have security concerns. 4) The registry metadata did not declare the required 'membrane' binary even though SKILL.md requires it — treat that as a minor inconsistency and confirm install steps. 5) Because this skill is instruction-only, there was no code to scan; if you need stronger assurance, inspect the Membrane CLI source or the connector implementation before granting access or sending sensitive data.

Type: OpenClaw Skill Name: xero-integration Version: 1.0.2 The skill bundle provides instructions and metadata for an AI agent to integrate with Xero using the Membrane CLI. The SKILL.md file outlines standard procedures for installation (npm install -g @membranehq/cli), authentication, and executing accounting actions via the 'membrane' command-line tool. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the instructions are consistent with the stated purpose of managing Xero accounting data.