📦 Skill Agent Broadcast — 多会话群发
v1.0.1一键向多个 OpenClaw 群组会话同时广播消息，实现跨智能体协调、警报与公告通知，提升协作效率。
0· 427·1 当前·1 累计
by 下载技能包
最后更新
2026/4/23
安全扫描
OpenClaw
安全
high confidenceThe skill's code, instructions, and requirements align with its stated purpose of broadcasting messages via a local OpenClaw gateway and there are no signs of hidden exfiltration or disproportionate privileges.
评估建议
This skill appears coherent with its stated purpose. Before installing, confirm you trust the local OpenClaw gateway that the script will POST to (localhost:OPENCLAW_PORT) and ensure any OPENCLAW_TOKEN you set is for that gateway only. Review config/groups.json to avoid accidentally broadcasting to real chat groups you don't intend. Note the registry metadata doesn't mark OPENCLAW_TOKEN as required even though the script supports it — the token is optional but if present will be sent as a Bearer...详细分析 ▾
✓ 用途与能力
Name/description (broadcast to OpenClaw groups) matches the included files: a node script that reads a groups registry and POSTs messages to a local gateway (/api/send). Required binary 'node' is appropriate. The presence of config/groups.json with chat IDs is consistent with the stated purpose.
✓ 指令范围
SKILL.md instructs running scripts/broadcast.js and documents env vars and config path that the script actually uses. The runtime instructions do not ask the agent to read unrelated files or transmit data to external endpoints — requests are targeted to localhost gateway. The script only reads the groups registry and optional OPENCLAW_TOKEN.
✓ 安装机制
There is no external install step or remote download; this is an instruction-only skill with bundled scripts. No archive/extract or third-party package fetches are present, so installation risk is low.
ℹ 凭证需求
Registry metadata lists no required env vars, while SKILL.md documents OPENCLAW_PORT, OPENCLAW_TOKEN (optional), and GROUPS_CONFIG_PATH. The script treats OPENCLAW_TOKEN as optional (defaults to empty) and only sends an Authorization header if a token is set. This is reasonable but the registry/metadata mismatch is worth noting so users know the token is optional but relevant.
✓ 持久化与权限
always is false and the skill does not request persistent system-wide privileges or modify other skills. It relies on a local gateway and local config only.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/2
- Removed the internal documentation file config/internal.md. - No functional or user-facing changes.
● 可疑
安装命令
点击复制官方npx clawhub@latest install skill-agent-broadcast
镜像加速npx clawhub@latest install skill-agent-broadcast --registry https://cn.longxiaskill.com