Serwersmspl
v1.0.0SerwerSMS.pl integration. Manage data, records, and automate workflows. Use when the user wants to interact with SerwerSMS.pl data.
⭐ 0· 61·0 current·0 all-time
byMembrane Dev@membranedev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description claim SerwerSMS.pl integration and the SKILL.md consistently instructs use of the Membrane CLI to connect, discover actions, run proxy requests, and manage contacts/SMS — these requirements align with the stated purpose.
Instruction Scope
Instructions are limited to installing and using the Membrane CLI and running membrane commands; they do not ask to read local files or unrelated env vars. Important: requests and credentials are proxied through Membrane's service, so message content, phone numbers, and API calls will be sent to Membrane (not directly to SerwerSMS).
Install Mechanism
There is no platform install spec in the registry (instruction-only), but the SKILL.md tells users to run a global npm install of @membranehq/cli. Installing from the public npm registry is normal for a CLI but carries the usual moderate risk (un-pinned version, global install modifies system PATH).
Credentials
The skill declares no env vars or credentials and explicitly relies on Membrane's browser-based login/connection flow. This is proportional — no unrelated secrets are requested by the skill itself.
Persistence & Privilege
The skill is not always-enabled and is user-invocable. There is no indication it writes to other skills' configs or requests elevated persistent privileges.
Scan Findings in Context
[no-regex-findings] expected: The static scanner found nothing because this is an instruction-only skill (no code files); that's expected for SKILL.md-only integrations. Absence of findings is not a guarantee of safety — inspect the external service (Membrane) and CLI package separately if concerned.
Assessment
This skill delegates authentication and proxying to the Membrane service and requires you to install and run the @membranehq/cli (npm -g). Before installing or using it: (1) understand that SMS content, phone numbers, and API calls will pass through Membrane's servers (review their privacy/security docs); (2) verify the @membranehq/cli package and its publisher on npm/GitHub and consider pinning a version; (3) prefer using a least-privileged/test account for initial use; and (4) be cautious about running global npm installs on shared machines. The skill itself does not request unrelated credentials or local file access.Like a lobster shell, security has layers — review code before you run it.
latestvk97dcrh38dmnfn50b6kezcq6xh845fn6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.