← Back to Skills Marketplace
zero2ai-hub

Skill Agent Broadcast

by Zero2Ai · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
475
Downloads
0
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install skill-agent-broadcast
Description
Broadcast a message to multiple OpenClaw group sessions simultaneously. Use for cross-agent coordination, alerts, and announcements.
Usage Guidance
This skill appears coherent with its stated purpose. Before installing, confirm you trust the local OpenClaw gateway that the script will POST to (localhost:OPENCLAW_PORT) and ensure any OPENCLAW_TOKEN you set is for that gateway only. Review config/groups.json to avoid accidentally broadcasting to real chat groups you don't intend. Note the registry metadata doesn't mark OPENCLAW_TOKEN as required even though the script supports it — the token is optional but if present will be sent as a Bearer token to the local gateway. If the script were modified to target non-local hosts (not localhost) or to fetch code at install time, treat that as suspicious and do not install without deeper review.
Capability Analysis
Type: OpenClaw Skill Name: skill-agent-broadcast Version: 1.0.1 The skill is classified as suspicious due to a potential arbitrary file read vulnerability in `scripts/broadcast.js`. The `GROUPS_CONFIG_PATH` environment variable, if controlled by an attacker, could be used to make the skill attempt to read any file on the system and parse it as JSON. While the script does not exfiltrate the content of arbitrary files or execute them, this capability represents a risky information disclosure vector. No other clear evidence of malicious intent, such as data exfiltration, persistence, or prompt injection against the agent, was found.
Capability Assessment
Purpose & Capability
Name/description (broadcast to OpenClaw groups) matches the included files: a node script that reads a groups registry and POSTs messages to a local gateway (/api/send). Required binary 'node' is appropriate. The presence of config/groups.json with chat IDs is consistent with the stated purpose.
Instruction Scope
SKILL.md instructs running scripts/broadcast.js and documents env vars and config path that the script actually uses. The runtime instructions do not ask the agent to read unrelated files or transmit data to external endpoints — requests are targeted to localhost gateway. The script only reads the groups registry and optional OPENCLAW_TOKEN.
Install Mechanism
There is no external install step or remote download; this is an instruction-only skill with bundled scripts. No archive/extract or third-party package fetches are present, so installation risk is low.
Credentials
Registry metadata lists no required env vars, while SKILL.md documents OPENCLAW_PORT, OPENCLAW_TOKEN (optional), and GROUPS_CONFIG_PATH. The script treats OPENCLAW_TOKEN as optional (defaults to empty) and only sends an Authorization header if a token is set. This is reasonable but the registry/metadata mismatch is worth noting so users know the token is optional but relevant.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills. It relies on a local gateway and local config only.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install skill-agent-broadcast
  3. After installation, invoke the skill by name or use /skill-agent-broadcast
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Removed the internal documentation file config/internal.md. - No functional or user-facing changes.
v1.0.0
Initial release of skill-agent-broadcast. - Enables broadcasting a single message to multiple OpenClaw Telegram or Discord groups at once. - Supports specifying groups by name or raw chat ID, or broadcasting to all registered groups. - Allows setting a custom delay between sends for rate limiting. - Configurable via environment variables and an editable group registry JSON file. - Provides per-group delivery receipts and a summary report of broadcast results.
Metadata
Slug skill-agent-broadcast
Version 1.0.1
License
All-time Installs 1
Active Installs 1
Total Versions 2
Frequently Asked Questions

What is Skill Agent Broadcast?

Broadcast a message to multiple OpenClaw group sessions simultaneously. Use for cross-agent coordination, alerts, and announcements. It is an AI Agent Skill for Claude Code / OpenClaw, with 475 downloads so far.

How do I install Skill Agent Broadcast?

Run "/install skill-agent-broadcast" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Skill Agent Broadcast free?

Yes, Skill Agent Broadcast is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Skill Agent Broadcast support?

Skill Agent Broadcast is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Skill Agent Broadcast?

It is built and maintained by Zero2Ai (@zero2ai-hub); the current version is v1.0.1.

💬 Comments