D7 Sms
v1.0.2D7 SMS integration. Manage data, records, and automate workflows. Use when the user wants to interact with D7 SMS data.
⭐ 0· 74·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's stated purpose (D7 SMS integration) matches the instructions which use Membrane to call D7. Minor metadata mismatch: registry declares no required binaries, but SKILL.md instructs installing the @membranehq/cli CLI (expected for this integration).
Instruction Scope
Instructions are narrowly scoped to installing the Membrane CLI, logging into Membrane, creating/inspecting connections, running actions, and proxying requests to D7 SMS via Membrane. The skill does not instruct reading unrelated files or harvesting local environment variables.
Install Mechanism
This is an instruction-only skill (no install spec). It tells the user to run `npm install -g @membranehq/cli`, which will install a global npm package — a reasonable but non-trivial operation that writes to disk and requires trusting the package publisher. No hidden download URLs or extraction steps are present.
Credentials
The skill itself declares no required environment variables or credentials and explicitly advises not to ask users for API keys. However, it delegates auth to Membrane: the user’s D7 credentials (or OAuth tokens) will be managed by Membrane’s service, so trusting Membrane with those credentials is required.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges or persistent presence. It does not modify other skills or system-wide agent settings according to the instructions.
Assessment
This skill appears coherent for integrating D7 SMS via the Membrane platform. Before installing or following the instructions: (1) verify you trust Membrane (privacy, storage, and handling of your D7 credentials), (2) review the @membranehq/cli package on npm/GitHub and prefer a pinned version if you need reproducibility, (3) be aware `npm install -g` installs a global binary—use an isolated environment/container if you want to avoid modifying your host, and (4) confirm that proxying API calls through Membrane matches your security and compliance requirements (sensitive message content will flow through Membrane). The registry metadata omission of the required CLI is a minor inconsistency but not a functional red flag.Like a lobster shell, security has layers — review code before you run it.
latestvk97e0kyx1f3c989bst2vvatvx9843snc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.