Sms Alert
v1.0.2SMS Alert integration. Manage Alerts, Contacts, Templates. Use when the user wants to interact with SMS Alert data.
⭐ 0· 124·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description say 'SMS Alert integration' and the SKILL.md consistently instructs the agent to use the Membrane CLI to discover connectors, create connections, run actions, and proxy API requests to SMS Alert. Requiring network access and a Membrane account is consistent with that goal.
Instruction Scope
Instructions are specific: install @membranehq/cli, authenticate via membrane login, use membrane connection/action/request commands. The doc does not instruct reading unrelated local files, exporting unrelated environment variables, or exfiltrating data to third-party endpoints beyond Membrane/proxied SMS Alert. Headless login flow and proxy usage are mentioned and within scope.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but the SKILL.md explicitly asks the user to run an npm global install (npm install -g @membranehq/cli). Installing a third-party global npm package is a normal way to get the CLI but does execute remote code on the host; this is a moderate operational risk to consider (review package source, run in a sandbox, or use npx when possible).
Credentials
The skill declares no required env vars or credentials and explicitly advises against asking users for API keys, instead using Membrane-managed connections. That is proportionate to the described function.
Persistence & Privilege
always is false, the skill is user-invocable, and there are no instructions to modify other skills or system-wide agent settings. The only persistent change the guidance suggests is installing the CLI (a user action).
Assessment
This skill appears coherent: it uses Membrane to manage SMS Alert connectors and does not ask for secrets directly. Before installing/using it, consider: (1) The SKILL.md asks you to install a third-party CLI globally via npm — that runs code on your machine, so review the @membranehq/cli package (source, recent releases) or run it via npx or in an isolated environment. (2) The integration uses browser-based authentication with Membrane, so you will be granting Membrane access to the target service—verify you trust Membrane and review its privacy/auth model. (3) For headless or automated environments, verify any printed URLs or codes are legitimate and never paste secrets into prompts. If you need higher assurance, test in a sandbox or container before using on production machines.Like a lobster shell, security has layers — review code before you run it.
latestvk974w0wb9q8kxkaashx8a67fen8423zc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.