Smsapi
v1.0.2SMSAPI integration. Manage SMSes, Contacts, Groups, Campaigns, Templates. Use when the user wants to interact with SMSAPI data.
⭐ 0· 97·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill describes SMSAPI integration and all runtime instructions use the Membrane CLI to discover connections, run actions, and proxy requests to SMSAPI — which is coherent with the stated purpose.
Instruction Scope
SKILL.md only instructs installing and using the Membrane CLI and the Membrane login/connection flow. It does not instruct reading unrelated files, exfiltrating data, or accessing unrelated environment variables. Proxying requests through Membrane is explicitly documented and expected for this integration.
Install Mechanism
No install spec in the skill package itself; the SKILL.md recommends npm install -g @membranehq/cli (or using npx). Installing a public npm CLI is reasonable for this use case, but global npm installs require elevated permissions and pull code from the public registry — verify the package name and source before installing. Using npx avoids a persistent global install.
Credentials
The skill declares no required env vars or credentials and explicitly advises against requesting user API keys, delegating auth to Membrane. This is proportionate to the purpose. Note: creating a connection via Membrane will grant Membrane access to the user's SMSAPI account (expected for this integration).
Persistence & Privilege
always is false and the skill is instruction-only with no install artifacts. It does not request system-level persistence or modify other skills' configs.
Assessment
This skill is coherent: it instructs the agent to use the Membrane CLI to access SMSAPI and does not request unrelated secrets. Before installing, verify the @membranehq/cli package (publisher, npm page, GitHub repo, and version) and prefer npx if you want to avoid a global install. Understand that creating a Membrane connection grants Membrane access to your SMSAPI account (the expected behavior) — if you need stricter control, review Membrane's privacy/permission model and audit the connection you create. If you have organizational policies about installing third-party CLIs, follow those (or ask an admin) before running npm install -g.Like a lobster shell, security has layers — review code before you run it.
latestvk97em465wh1djkfeb9wdz0320x842307
License
MIT-0
Free to use, modify, and redistribute. No attribution required.