Sendsms
v1.0.2SendSMS integration. Manage SMSes, Contacts, Groups. Use when the user wants to interact with SendSMS data.
⭐ 0· 139·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to integrate with SendSMS and all runtime instructions use the Membrane CLI to discover connectors, create connections, run actions, or proxy requests — this matches the described purpose. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md only instructs use of the Membrane CLI (login, connect, action list/run, request proxy). It does not instruct reading arbitrary files, exporting environment variables, or exfiltrating host data. It does require network access and a Membrane account, which is expected for this integration.
Install Mechanism
There is no formal install spec in the registry (instruction-only skill). The doc recommends installing the @membranehq/cli via npm (global install) or using npx. Installing a CLI from npm is a reasonable choice, but users should be aware of the standard risks of installing third-party CLI tools (verify package source, prefer npx or scoped installs if you want to avoid global packages).
Credentials
The skill declares no env vars or secrets and explicitly instructs to let Membrane handle credentials. This is proportionate. However, using Membrane's proxy means request payloads (SMS content, contact lists, etc.) and authentication flows are routed through Membrane's servers — a privacy/telemetry consideration the user should accept before use.
Persistence & Privilege
The skill is not always-enabled and does not request special agent-wide persistence or rights. It does not instruct modifying other skills or system-wide settings. Autonomous invocation is allowed by default (platform normal) but is not combined with other red flags here.
Assessment
This skill is coherent: it uses the Membrane CLI to manage SendSMS connectors and does not ask for unrelated credentials. Before installing, verify you trust Membrane (review getmembrane.com privacy/security docs), because SMS content and contact data will be proxied through their service. Prefer using npx if you don't want a global npm install, confirm the @membranehq/cli package source (registry and maintainers), and perform initial testing in a controlled environment. No environment variables are required by the skill itself. If you rely on confidentiality for message content or contacts, ensure Membrane's terms and security posture meet your requirements.Like a lobster shell, security has layers — review code before you run it.
latestvk976emze59gtc0s931p2a02g8s843f9q
License
MIT-0
Free to use, modify, and redistribute. No attribution required.