← 返回 Skills 市场
Zoho Commerce
作者
Vlad Ursul
· GitHub ↗
· v1.0.1
· MIT-0
145
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install zoho-commerce
功能描述
Zoho Commerce integration. Manage data, records, and automate workflows. Use when the user wants to interact with Zoho Commerce data.
安全使用建议
This skill appears to do what it claims (connect to Zoho Commerce via the Membrane service), but there are manifesto omissions you should be aware of before installing:
- The SKILL.md requires installing a global npm package (@membranehq/cli) and network access to Membrane; the registry metadata does not declare these—confirm the manifest or expect to run an npm global install.
- The integration delegates authentication and API calls to Membrane. That means Zoho credentials and your commerce data will be handled/stored by Membrane's infrastructure. Verify you trust Membrane (review their privacy/security docs and the @membranehq/cli package source on GitHub/NPM) before proceeding.
- Prefer to install the CLI manually and inspect the package (repository and package contents) rather than running an automated install, and verify the connector in a test/sandbox Zoho account first.
- Ask the skill author to update the registry metadata to list required binaries, network access, and the need for a Membrane account so the skill's manifest matches its runtime instructions.
Given the metadata omissions and external dependency, proceed only if you trust Membrane and are comfortable with your data being proxied through that service.
功能分析
Type: OpenClaw Skill
Name: zoho-commerce
Version: 1.0.1
The zoho-commerce skill provides instructions for an AI agent to manage e-commerce data using the Membrane CLI. It outlines standard procedures for installing the `@membranehq/cli` npm package, authenticating via `membrane login`, and executing actions through the Membrane platform. The instructions in SKILL.md are transparent, align with the stated purpose of the integration, and do not contain evidence of malicious intent, data exfiltration, or harmful prompt injection.
能力标签
能力评估
Purpose & Capability
The skill's described purpose (Zoho Commerce integration) is coherent with the runtime instructions (use Membrane CLI, create a connection to the zoho-commerce connector). However the registry metadata lists no requirements while the SKILL.md explicitly requires network access, a Membrane account, and installation of the @membranehq/cli. The manifest should have declared these requirements (binaries, network, or account) but does not, which is an inconsistency.
Instruction Scope
The SKILL.md stays within the integration scope: it instructs using the Membrane CLI to authenticate, create a connection, discover and run actions, and avoid asking users for raw API keys. It does, however, direct the user/agent to perform authentication flows that involve opening a browser or pasting login codes and to send requests via Membrane (an external intermediary). This is expected for a service-proxy design but is a behavioral detail users should be aware of (their Zoho data and credentials will be managed via Membrane servers).
Install Mechanism
There is no install specification in the registry metadata, yet the SKILL.md tells users/agents to run `npm install -g @membranehq/cli@latest`. That is an implicit install step (global npm install) which will write to disk and execute code from the public npm registry. Installing a scoped npm package from a public registry is a moderate-risk action and should be declared explicitly in the manifest; the lack of an install spec is an omission and a coherence issue.
Credentials
The skill declares no required environment variables, and the SKILL.md explicitly says not to ask users for API keys because Membrane manages credentials server-side. That is proportionate to the stated purpose. However, because credentials and API traffic are proxied through Membrane, users should understand that sensitive Zoho credentials and data will be handled by Membrane's infrastructure rather than only locally.
Persistence & Privilege
The skill is not always-enabled and is user-invocable; it does not request elevated platform privileges or modifications to other skills. There is no evidence it demands persistent system-level presence beyond the optional global CLI installation the SKILL.md suggests.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install zoho-commerce - 安装完成后,直接呼叫该 Skill 的名称或使用
/zoho-commerce触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
Auto sync from membranedev/application-skills
v1.0.0
Auto sync from membranedev/application-skills
元数据
常见问题
Zoho Commerce 是什么?
Zoho Commerce integration. Manage data, records, and automate workflows. Use when the user wants to interact with Zoho Commerce data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 145 次。
如何安装 Zoho Commerce?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install zoho-commerce」即可一键安装,无需额外配置。
Zoho Commerce 是免费的吗?
是的,Zoho Commerce 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Zoho Commerce 支持哪些平台?
Zoho Commerce 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Zoho Commerce?
由 Vlad Ursul(@gora050)开发并维护,当前版本 v1.0.1。
推荐 Skills