Manage MyFeed things and groups via the MyFeed REST API.
Security Analysis
high confidenceThe skill's requirements and runtime instructions are coherent with its described purpose: it uses one API key and curl/jq to call the MyFeed REST API and does not request unrelated credentials or perform unexpected local actions.
Name/description (manage MyFeed things/groups) match the declared requirements: one API key (Myfeed_API_KEY) and jq for JSON parsing. No unrelated binaries or extra credentials are requested.
Instructions are straightforward curl calls to the MyFeed API and only read the declared Myfeed_API_KEY. They will transmit event data, invites and phone numbers to the remote API (expected for this capability). One minor note: the SKILL.md uses https://skill.myfeed.life/api while the homepage is https://myfeed.life — domain mismatch is likely benign but worth verifying that the API host is official.
Instruction-only skill with no install spec or code files — nothing is written to disk during install. Lowest-risk install posture.
Only a single API key environment variable (Myfeed_API_KEY) is required, which is reasonable for a REST-API integration. No other secrets or unrelated env vars are requested.
Skill does not request always:true, does not modify other skills or system settings, and is instruction-only so it has no persistent on-disk components.
Guidance
This skill appears to be what it says: it will use your Myfeed_API_KEY to call the MyFeed API and will send event details and invite phone numbers to the service. Before installing: 1) Verify that https://skill.myfeed.life is an official API host for MyFeed (the README/homepage lists https://myfeed.life; confirm the API subdomain is legitimate). 2) Keep the API key secret and use a key with limited scope if MyFeed supports it; rotate/revoke it if compromised. 3) Be aware that inviting contacts will transmit recipients' phone numbers to the remote service — avoid using this skill if you cannot share that data. 4) Check rate limits and do not expose the API key in logs or public places. If you need stronger assurance, request the skill's publisher/source and a formal privacy/security statement from Reis Mobile SRL or the service operator.
Latest Release
v2.0.1
- Fixed a typo in the environment variable name; it is now consistently Myfeed_API_KEY in all setup instructions and usage examples. - Corrected example usage commands to use the proper API key environment variable casing. - No functional or code changes; documentation update only.
Popular Skills
Published by @l-fy on ClawHub
