Migma

Generate, send, validate, and export AI-powered emails from the terminal; manage contacts, segments, tags, domains, and webhooks with Migma CLI.

This skill appears to do what it says: it calls a migma CLI and uses a single API key. Before installing: 1) verify the npm package @migma/cli on the official npm/GitHub page and confirm the maintainer and version; 2) treat MIGMA_API_KEY as a high-privilege secret (it can send email and modify contact lists); preferably use a scoped or test API key, not a production key; 3) be aware that importing CSVs or using 'projects import' will upload local data and website assets to the service — review Migma's privacy/terms; 4) consider disabling autonomous invocation for this skill if you don’t want the agent to send emails or import contacts without explicit user approval. Small note: registry metadata showed no homepage while the SKILL.md lists https://migma.ai — that mismatch is not necessarily malicious but you may want to confirm the official project URL before proceeding.

Type: OpenClaw Skill Name: migma Version: 1.3.0 The skill bundle provides instructions for using the 'migma' CLI tool to manage emails, contacts, and brand assets. All commands and instructions are directly related to the stated purpose of the skill. It requires an API key and the 'migma' binary, which is installed via npm. While the skill involves file system operations (reading/writing HTML, CSV) and network requests (importing brand from a URL), these are legitimate functionalities of an email marketing tool and are not accompanied by any instructions indicating malicious intent, data exfiltration, persistence mechanisms, or prompt injection attempts against the agent. The instructions are clear and focused on the tool's intended use.