Simpletexting
v1.0.2SimpleTexting integration. Manage Contacts, Campaigns, Keywords. Use when the user wants to interact with SimpleTexting data.
⭐ 0· 84·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is explicitly a SimpleTexting integration and all runtime instructions center on installing and using the Membrane CLI to connect to SimpleTexting and run actions. There are no unrelated required env vars, binaries, or paths.
Instruction Scope
SKILL.md stays on-topic (connect via Membrane, list/run actions, proxy requests). It does grant the operator the ability to run arbitrary proxied API calls via `membrane request` and to run arbitrary actions discovered with `membrane action list` — this is expected for an integration but does give broad capability to read/write data in the connected SimpleTexting account, depending on the connection's permissions.
Install Mechanism
No automated install spec is included in the registry; the doc instructs users to run `npm install -g @membranehq/cli`. Installing a global npm package is a normal but nontrivial step (it runs third-party code on the machine). This is an expected mechanism but carries the usual trust risk of npm packages.
Credentials
The skill requests no environment variables or local credentials and relies on Membrane to manage authentication. That is proportionate for a connector that delegates auth to a centralized service.
Persistence & Privilege
The skill does not request always:true or any system-level persistence. It can be invoked autonomously (default platform behavior), which is normal; note that autonomous invocation plus the ability to proxy arbitrary requests could perform API calls under the user's connection if the agent is permitted to run the skill.
Assessment
This skill appears coherent: it uses the Membrane CLI to manage SimpleTexting connections and does not ask for local secrets. Before installing: 1) Confirm you trust the @membranehq/cli npm package and its publisher (global npm installs run third-party code). 2) Be aware that once connected, commands and proxied requests run under your Membrane-connected SimpleTexting account and can read/send data according to that account's permissions. 3) If you’re concerned about autonomous agents making requests, restrict agent permissions or require explicit user confirmation before running actions that read or modify data. 4) Verify the connection ID and permissions when completing the Membrane browser auth step.Like a lobster shell, security has layers — review code before you run it.
latestvk972m48k48qwpj42bkr7g487a9843psw
License
MIT-0
Free to use, modify, and redistribute. No attribution required.