Superphone
v1.0.2SuperPhone integration. Manage Persons, Organizations, Leads, Deals, Activities, Notes and more. Use when the user wants to interact with SuperPhone data.
⭐ 0· 119·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description describe a SuperPhone integration and the SKILL.md exclusively documents using the Membrane CLI and Membrane connections to access SuperPhone; requested capabilities match the stated purpose.
Instruction Scope
Runtime instructions are limited to installing/using the Membrane CLI, creating/listing connections, running actions, and proxying API requests through Membrane. The instructions do not ask the agent to read unrelated system files or environment variables, nor to exfiltrate data to unexpected endpoints.
Install Mechanism
No install spec included in the package (instruction-only). The SKILL.md recommends `npm install -g @membranehq/cli` (public npm package). Global npm installs modify the host environment and pull code from the npm registry — this is expected for a CLI but is a moderate-risk operation compared with instruction-only skills that require no installs.
Credentials
The skill requests no environment variables or secrets and explicitly instructs not to ask users for API keys, delegating auth to Membrane. That is proportionate for a connector-based integration.
Persistence & Privilege
The skill does not request always:true and is user-invocable. It does not instruct modifying other skills or system-wide agent settings. Autonomous invocation is enabled by platform default (not a concern here given other factors).
Assessment
This skill is coherent: it expects you to install and use the @membranehq/cli to authenticate and proxy SuperPhone calls, and it intentionally does not ask for API keys. Before installing, verify the @membranehq/cli package and the Membrane service are trustworthy for your data (check the npm package page and the GitHub repo referenced in the SKILL.md), be aware a global npm install changes your system PATH, and understand that granting Membrane access will allow it to act on your SuperPhone account. If you prefer less system impact, consider running the CLI in a container or VM, or using a scoped/local install (npx) instead of a global install.Like a lobster shell, security has layers — review code before you run it.
latestvk975qxnz8a6qwzdb666t5rm9d9842cxf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.