Zendesk

Zendesk integration. Manage customer success and ticketing data, records, and workflows. Use when the user wants to interact with Zendesk data.

This skill is coherent and appears to do what it says, but check a few practical things before installing/using it: (1) The skill relies on the third-party Membrane service and its CLI — you will need a Membrane account and will trust Membrane to store/refresh Zendesk credentials; review their privacy/security docs. (2) The README recommends a global npm install; verify the npm package publisher (@membranehq) and consider installing in a controlled environment (container or CI runner) rather than your primary machine. (3) Some listed actions are destructive (delete-ticket, delete-organization). Always review the specific action and parameters before running, and prefer read-only discovery first. (4) Do not paste raw Zendesk API keys or other secrets into chat; use the Membrane connection flow as described. If you want a higher-assurance assessment, provide the npm package name and the Membrane service security/privacy links so those can be checked.

Type: OpenClaw Skill Name: zendesk-integration Version: 1.0.3 The skill requires the agent to perform high-risk operations, including the global installation of a third-party CLI tool (`npm install -g @membranehq/cli`) and the execution of shell commands to manage authentication and ticketing data. While these actions are aligned with the stated purpose of integrating Zendesk via the Membrane platform (getmembrane.com), the reliance on an external binary for credential management and the requirement to modify the system environment via global package installation introduce significant security risks and potential for supply chain exploitation. These instructions are contained within SKILL.md.