Loopmessage
v1.0.2LoopMessage integration. Manage Users, Organizations. Use when the user wants to interact with LoopMessage data.
⭐ 0· 117·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The SKILL.md instructs using the Membrane CLI to manage LoopMessage resources, which aligns with the description. However the file includes an out-of-place 'Official docs' link to Facebook Messenger docs (developers.facebook.com), which appears to be a documentation mistake and not related to LoopMessage/Membrane.
Instruction Scope
Instructions are limited to installing the Membrane CLI, logging in, discovering connectors/actions, running actions, and proxying requests to the LoopMessage API. There are no instructions to read arbitrary local files, environment variables, or send data to unexpected endpoints beyond Membrane and the target API.
Install Mechanism
The install step is a public npm global install of @membranehq/cli (npx usage also shown). This is a common distribution method but carries the usual risks of installing third-party npm packages globally — you should verify the package provenance and version before installing.
Credentials
The skill requests no environment variables and relies on Membrane to handle credentials. That is proportionate, but you should be aware the Membrane CLI will manage and store authentication tokens locally (and will perform browser-based login), so you must trust Membrane's account management and local token storage.
Persistence & Privilege
The skill is instruction-only, does not set always:true, and does not request persistent system-wide privileges. It does require the agent to run the Membrane CLI when invoked, which is normal for this integration pattern.
Assessment
This skill is an instruction-only integration that expects you to install and use the @membranehq/cli npm tool and authenticate via Membrane to access LoopMessage. Before installing or using it: confirm the @membranehq/cli package and repository are legitimate; avoid installing npm packages globally as root; be aware the CLI stores authentication tokens locally and opens a browser for login (or uses a code-for-headless flow); verify the referenced homepage/repository and the connector you create in Membrane; and note the SKILL.md's 'Official docs' link appears incorrect—check LoopMessage/Membrane docs directly if anything seems off.Like a lobster shell, security has layers — review code before you run it.
latestvk97096prvndgd78n1xbd6j27ws84334h
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
