安全扫描
OpenClaw
安全
high confidenceThe skill is internally coherent: it declares and uses the wacli CLI to send/search WhatsApp messages and only requests the binaries/install mechanisms needed for that purpose.
评估建议
This skill appears to do what it says: it invokes the wacli CLI to authenticate, sync, search history, and send messages/files. Before installing or using it:
- Verify the wacli project and Homebrew tap (steipete) are the official sources you expect (review the GitHub repo and tap) because 'go @latest' and third-party brew taps pull upstream code at install time.
- Understand privacy implications: using this skill will access your WhatsApp session directory (~/.wacli), allow searching message hi...详细分析 ▾
ℹ 用途与能力
The description, required binary (wacli), and install specs (brew formula and Go module) align with the stated purpose of sending/searching WhatsApp messages. Minor metadata inconsistencies exist: the registry metadata (owner/slug) differs from the _meta.json/skill metadata (ownerId/slug 'wacli'), which is suspicious from a provenance/integrity standpoint but does not change the tool's declared capabilities.
✓ 指令范围
SKILL.md instructs the agent to run wacli commands only for auth, sync, searching history, and sending messages/files. It references expected local paths (store dir ~/.wacli and arbitrary file paths when sending files) which is consistent with a CLI that stores session data and can upload local files. Note: access to ~/.wacli and arbitrary local file paths is necessary for this tool but is a privacy-sensitive capability (message history and local files).
ℹ 安装机制
Install options are standard: a Homebrew formula (steipete/tap/wacli) and a Go module (github.com/steipete/wacli/cmd/wacli@latest). These are expected for distributing a CLI. The Go 'latest' install pulls current upstream code at install time (moderate risk if you don't audit the repo); brew from a third-party tap is also reasonable but should be verified.
✓ 凭证需求
No environment variables, extra credentials, or unrelated config paths are requested. The skill does not ask for unrelated secrets or wide-ranging environment access in its manifest.
✓ 持久化与权限
always is false and the skill is instruction-only (no bundled code). It does not request persistent or elevated platform privileges or attempt to modify other skills' configs. It will naturally read/write the CLI's store directory (~/.wacli) as part of normal operation.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/5
test
● 可疑
安装命令 点击复制
官方npx clawhub@latest install test-wa
镜像加速npx clawhub@latest install test-wa --registry https://cn.clawhub-mirror.com
技能文档
Use wacli only when the user explicitly asks you to message someone else on WhatsApp or when they ask to sync/search WhatsApp history.
Do NOT use wacli for normal user chats; Clawdbot routes WhatsApp conversations automatically.
If the user is chatting with you on WhatsApp, you should not reach for this tool unless they ask you to contact a third party.
Safety
- Require explicit recipient + message text.
- Confirm recipient + message before sending.
- If anything is ambiguous, ask a clarifying question.
Auth + sync
wacli auth(QR login + initial sync)wacli sync --follow(continuous sync)wacli doctor
Find chats + messages
wacli chats list --limit 20 --query "name or number"wacli messages search "query" --limit 20 --chatwacli messages search "invoice" --after 2025-01-01 --before 2025-12-31
History backfill
wacli history backfill --chat--requests 2 --count 50
Send
- Text:
wacli send text --to "+14155551212" --message "Hello! Are you free at 3pm?" - Group:
wacli send text --to "1234567890-123456789@g.us" --message "Running 5 min late." - File:
wacli send file --to "+14155551212" --file /path/agenda.pdf --caption "Agenda"
Notes
- Store dir:
~/.wacli(override with--store). - Use
--jsonfor machine-readable output when parsing. - Backfill requires your phone online; results are best-effort.
- WhatsApp CLI is not needed for routine user chats; it’s for messaging other people.
- JIDs: direct chats look like
; groups look like@s.whatsapp.net (use@g.us wacli chats listto find).
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制