Phaxio
v1.0.2Phaxio integration. Manage Accounts. Use when the user wants to interact with Phaxio data.
⭐ 0· 98·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Phaxio integration) matches the SKILL.md: it instructs the agent to use the Membrane CLI to create connections, list/run actions, download media, and proxy requests to Phaxio. Requested capabilities (network access, a Membrane account) are expected for this purpose.
Instruction Scope
Instructions are limited to using the Membrane CLI and browser-based auth flows; they do not request local file reads or unrelated credentials. Note: the skill explicitly recommends using 'membrane request' to proxy arbitrary Phaxio API endpoints — that will send whatever request/response data through Membrane's service, so users should understand that proxied requests (including any sensitive payloads) will be handled by Membrane.
Install Mechanism
There is no automatic install spec in the registry (the skill is instruction-only). The documentation tells users to install @membranehq/cli via 'npm install -g', which is a common approach but involves installing a global npm package under the user's control; users should verify the package name and source before installing.
Credentials
The skill declares no required environment variables or local config paths. It relies on a Membrane account and the CLI-managed connection flow instead of asking for raw API keys, which is proportionate for this integration.
Persistence & Privilege
always is false, no special OS or persistence requirements, and the skill does not request modification of other skills or system-wide configs. Autonomous invocation (model-invocation enabled) is the platform default and not a special privilege here.
Assessment
This skill appears to be what it claims: a Membrane-based Phaxio integration. Before using it, ensure you: (1) trust Membrane (getmembrane.com) because authentication and proxied requests (including any sensitive fax payloads) will be handled by their service; (2) verify you are installing the official @membranehq/cli package (npm global install has the usual supply-chain risks); (3) understand that using 'membrane request' will route arbitrary API calls through Membrane, so avoid sending secrets you don't want proxied; and (4) confirm you are comfortable granting the agent network access and using browser-based auth flows to create the connection. If any of that concerns you, review Membrane's privacy/security docs and consider creating/inspecting the connection manually before letting the skill act on your behalf.Like a lobster shell, security has layers — review code before you run it.
latestvk97fr51yjchvrpb1hhgnharr118420sb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.