Gupshup
v1.0.2Gupshup integration. Manage Users, Organizations. Use when the user wants to interact with Gupshup data.
⭐ 0· 114·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description (Gupshup integration) align with the instructions: all operations are performed via the Membrane CLI and Membrane connections to Gupshup. No unrelated services, env vars, or binaries are requested.
Instruction Scope
SKILL.md limits actions to installing/using the Membrane CLI, creating/checking connections, running actions, and proxying requests to the Gupshup API. It does not instruct the agent to read arbitrary filesystem data or other credentials, nor to exfiltrate data to unexpected endpoints.
Install Mechanism
The skill is instruction-only (no install spec). It recommends installing @membranehq/cli via npm install -g, which is a typical, expected step but carries the usual risks of installing global npm packages (privilege to write global bin, trust in package provenance).
Credentials
No environment variables or credentials are declared or required. The instructions explicitly advise using Membrane connections rather than asking users for API keys, which is proportionate to the stated purpose.
Persistence & Privilege
The skill is not always-enabled and does not request elevated persistence. Model invocation is allowed (platform default), which is expected for a user-invocable integration and is not by itself a concern.
Assessment
This is an instruction-only skill that uses the Membrane CLI to talk to Gupshup. Before installing or using it: 1) Confirm you trust the @membranehq/cli npm package (review its npm/github pages). 2) Be aware installing with npm -g requires write access to global folders — consider using a container or virtual environment if you prefer isolation. 3) You will need a Membrane account and will authenticate via the browser; the skill will act using that account, so only grant it to accounts you trust. 4) If you enable autonomous agent invocation, the agent could run membrane CLI commands (making network requests under your Membrane account); restrict or monitor the agent if you need tighter control.Like a lobster shell, security has layers — review code before you run it.
latestvk9771dpmp1wfzqw98d17cg9wss842j3t
License
MIT-0
Free to use, modify, and redistribute. No attribution required.