📦 Signal CLI — 发Signal消息
v0.1.0通过本地 macOS 上的 signal-cli 发送 Signal 消息、附件，或按姓名/昵称/手机号查找并列出 Signal 联系人。
3· 2.0k·6 当前·6 累计
by @pseudobun下载技能包
最后更新
2026/2/26
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is a thin wrapper around your local signal-cli and appears to do nothing beyond calling that binary. Before installing, ensure: (1) you have signal-cli and Python 3 installed and registered/running locally (the skill does not declare these dependencies), (2) you trust the agent to confirm recipients and message text (the scripts accept attachments and arbitrary file paths which, if chosen by an agent without confirmation, could leak local files), and (3) you keep autonomous invocation...详细分析 ▾
ℹ 用途与能力
The skill's name, description, SKILL.md, and bundled scripts all focus on driving the local signal-cli binary to list contacts and send messages — this is coherent. However, the registry metadata declares no required binaries or environment variables even though the scripts invoke the 'signal-cli' executable and are Python scripts, so required runtime dependencies are not declared.
✓ 指令范围
Runtime instructions and the two scripts stay within the stated scope: they call signal-cli to list contacts and send messages, resolve names to numbers, and accept optional attachment paths. They do not access unrelated system files or external endpoints. Note: attachments are taken as arbitrary file paths supplied to the script and passed to signal-cli; if an agent were allowed to choose attachments without user confirmation, that could be used to exfiltrate local files via Signal.
✓ 安装机制
There is no install spec (instruction-only behavior plus shipped scripts), which is low-risk. The skill relies on existing local tooling rather than downloading code at install time. The only concern is the metadata omission of required binaries (signal-cli and a Python 3 runtime).
✓ 凭证需求
The skill requests no environment variables or credentials, which is proportional. It implicitly uses the local signal-cli installation and its local account credentials/configuration — this is expected for a wrapper around a local CLI but is worth noting: the skill will act with whatever access the local signal-cli has to the user's Signal account and local config files.
✓ 持久化与权限
The skill does not request persistent/always-on privileges, does not modify other skills or system-wide settings, and does not attempt to install background processes.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/2/4
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install signal-cli
镜像加速npx clawhub@latest install signal-cli --registry https://cn.longxiaskill.com