Labsmobile
v1.0.2LabsMobile integration. Manage SMSes, Contacts, Groups. Use when the user wants to interact with LabsMobile data.
⭐ 0· 94·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's purpose (manage LabsMobile SMS, contacts, groups) matches the instructions (use Membrane to connect and proxy requests to LabsMobile). One minor inconsistency: registry metadata lists no required binaries or env vars, but the SKILL.md explicitly instructs installing and running the Membrane CLI (npm + @membranehq/cli) and needs the CLI on PATH.
Instruction Scope
The SKILL.md confines actions to using the Membrane CLI (login, connection, action run, proxy requests) and browser-based authentication; it does not instruct reading unrelated local files or requesting unrelated credentials. It explicitly advises against asking users for API keys and recommends creating a Membrane connection instead.
Install Mechanism
There is no install spec in the registry (instruction-only), but the documentation instructs a global npm install of @membranehq/cli. Installing an npm CLI from the public registry is a common pattern but carries the usual supply-chain risk; the SKILL.md points to the project's homepage and repository which helps verification.
Credentials
The skill does not request environment variables or credentials in metadata; authentication is handled via Membrane's login flow. This is proportionate to the described functionality. Users should be aware that Membrane will hold credentials server-side for the connection.
Persistence & Privilege
The skill is not always-enabled and is user-invocable; it does not request persistent system privileges or modify other skills. Autonomous invocation is allowed (platform default) but not combined with other concerning capabilities.
Scan Findings in Context
[no_code_files] expected: The skill is instruction-only (no code files), so the regex-based scanner had nothing to analyze. This is expected for a CLI-driven integration.
Assessment
This skill looks coherent but before installing: 1) Verify the @membranehq/cli package and the getmembrane.com project (review GitHub repo and package publisher) to ensure you trust the CLI you will install. 2) Prefer installing the CLI in a controlled environment (container or VM) rather than globally on a critical machine. 3) Expect to authenticate via Membrane's browser flow — Membrane will manage LabsMobile credentials server-side, so review Membrane's privacy/security docs and confirm you are comfortable granting it access to your LabsMobile account. 4) Note the registry metadata omits the required CLI/tooling (npm + membrane), so ensure those prerequisites are available before using the skill. 5) Do not share your LabsMobile API keys directly with the agent; follow the Membrane connect flow as documented.Like a lobster shell, security has layers — review code before you run it.
latestvk976x93yw80mnabfqdmd5f6fbn842ark
License
MIT-0
Free to use, modify, and redistribute. No attribution required.