Vonage

Vonage — SMS messaging, voice calls, verify API, number management, and application management.

This skill appears to implement Vonage API calls and only requests the expected API key and secret, but review the code before installing. Pay attention to three points: (1) the script will try to read a .env file under WORKSPACE or ~/.openclaw/workspace if the env vars are not set — avoid storing unrelated secrets there or set the VONAGE_* env vars explicitly; (2) the implementation includes sending the API secret as a URL query parameter (api_secret), which can be captured in logs or proxies — consider whether that is acceptable for your environment; and (3) the CLI contains small bugs (mismatched argument names and duplicated/embedded query strings) that could cause unexpected behavior. If you plan to use this skill, run it in an isolated environment, inspect/modify the script (e.g., move secrets to safer headers, fix argparse handling), and confirm network endpoints are the official Vonage ones. If you need higher assurance, request a version from a known maintainer or a vetted marketplace package.

Type: OpenClaw Skill Name: vonage Version: 1.0.0 The skill is a standard CLI wrapper for the Vonage (formerly Nexmo) API, providing functionality for SMS, voice calls, and account management. It uses only the Python standard library and directs all API requests to the legitimate 'api.nexmo.com' endpoint. While it retrieves credentials from the environment or a local '.env' file and passes them via query parameters, this behavior is consistent with the skill's stated purpose and lacks any indicators of malicious intent or data exfiltration.