MH wacli

Send WhatsApp messages to other people or search/sync WhatsApp history via the wacli CLI (not for normal user chats).

This skill appears to do what it says: it calls the wacli CLI to send and search WhatsApp messages. Before installing, confirm you trust the wacli project (inspect the Homebrew formula and the Go module repo at github.com/steipete/wacli and the homepage https://wacli.sh). Understand that wacli will store auth/session data and synced message history under ~/.wacli and can read/send messages for the authenticated WhatsApp account. Only grant access if you intend the agent to be able to send messages to third parties and access message history. If you want tighter control, keep the skill disabled unless explicitly invoked and review the CLI’s source code or package recipe for any unexpected network or filesystem actions. Absence of static scan findings only means there were no regex matches — it is not a substitute for reviewing the upstream package and its install scripts.

Type: OpenClaw Skill Name: mh-wacli Version: 1.0.0 The skill bundle installs and instructs the AI agent to use the `wacli` command-line tool for WhatsApp. The `SKILL.md` provides clear, safety-oriented instructions for the agent, emphasizing explicit user confirmation for actions like sending messages and files, and restricting the tool's use to specific scenarios (e.g., messaging third parties, not routine chats). While the `wacli` tool has capabilities like sending local files, the agent's instructions are designed to prevent misuse. There is no evidence of malicious intent, data exfiltration, persistence mechanisms, or prompt injection designed to subvert the agent for harmful purposes.