← Back to Skills Marketplace
843
Downloads
0
Stars
0
Active Installs
5
Versions
Install in OpenClaw
/install wa-relay-skill
Description
WhatsApp message relay for OpenClaw v0.2.0. Routes third-party DMs to a relay agent that forwards them to the main agent via sessions_send. The main agent no...
Usage Guidance
This skill appears to be what it says, but it performs sensitive local actions. Before installing: 1) Inspect auth-profiles.json contents and consider creating or using a dedicated, limited-scope credential for the relay (do not blindly copy full admin/owner credentials). 2) Backup your OpenClaw installation and the main agent workspace (SOUL.md and auth files). 3) Review and, if desired, run the setup script step-by-step rather than letting it auto-patch: decline the credential copy and patch prompts and perform changes manually if you prefer. 4) After applying, verify .bak backups exist and that you can revert the regex patch once upstream PR #16531 is merged; remove copied credentials when no longer required. 5) Run in a test environment first and limit filesystem permissions on the relay workspace. If you are uncomfortable giving the relay full credential access or allowing scripts to patch node_modules, do not install; instead implement routing manually or use credentials scoped specifically for the relay.
Capability Analysis
Type: OpenClaw Skill
Name: wa-relay-skill
Version: 0.2.1
The skill is classified as suspicious due to high-risk operations performed by `scripts/setup.sh`. It copies sensitive `auth-profiles.json` credentials from the main agent to the relay agent, significantly expanding the attack surface. Furthermore, it modifies core OpenClaw JavaScript files (`paths-*.js`) and the main agent's `SOUL.md` using powerful `node -e` and `perl` commands. While these actions are transparently documented in `SKILL.md` and require user confirmation, they represent significant system-level modification capabilities and credential exposure, posing substantial vulnerabilities if the skill or environment were compromised.
Capability Assessment
Purpose & Capability
The scripts, README, and config generation align with a WhatsApp relay: creating a relay workspace, routing config, and adding a relay-handling section to the main agent. The files requested and produced match the stated purpose.
Instruction Scope
SKILL.md and scripts explicitly instruct the agent to create a relay workspace, append a relay section to the main agent's SOUL.md, copy auth-profiles.json from the main agent to the relay, and patch OpenClaw dist files to relax the session-id regex. These actions are in-scope for enabling the relay but grant the skill broad file-system modification authority (modifying other agent files and core dist files). The scripts do prompt for confirmation and produce .bak files for patched files.
Install Mechanism
No external installers or downloads are used; this is an instruction-only skill with local shell scripts. That reduces supply-chain risk, but scripts will modify local OpenClaw installation files.
Credentials
The skill does not require environment variables but reads and copies a sensitive file (~/.openclaw/agents/main/agent/auth-profiles.json) containing model-provider credentials. Copying these credentials to the relay is functionally necessary for the relay to authenticate, but it increases the attack surface because the relay gains the same credentials as the main agent. The credential access is not declared in metadata and is a significant privilege escalation in practice.
Persistence & Privilege
The scripts modify other agent state (main agent SOUL.md) and patch OpenClaw's node_modules/dist files to change a core regex. Those are persistent, system-scoped changes. The scripts create backups and ask for confirmation, but these modifications give the skill permanent changes to the runtime and to other agents' configuration.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install wa-relay-skill - After installation, invoke the skill by name or use
/wa-relay-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.2.1
Fixed config.patch JSON format: uses correct agentId/match/peer structure instead of name/filter/from
v0.2.0
New architecture: relay forwards to main agent via sessions_send. Main agent notifies owner with suggested responses. Support for direct number allowlist.
v0.1.2
Fix: enforce NO_REPLY to prevent relay from responding to senders. Add social engineering protection. Add interactive confirmations for auth copy and regex patch. Add security notes to SKILL.md.
v0.1.1
- Added frontmatter metadata to SKILL.md for improved documentation and clarity.
- Updated requirements to specify compatibility with OpenClaw v2026.2.14+.
- Expanded documentation with detailed security notes, explaining auth credential sharing and session ID patching required during setup.
- Improved setup instructions and transparency on required system modifications.
v0.1.0
- Initial release of wa-relay for OpenClaw.
- Routes third-party WhatsApp DMs to a relay agent that notifies the owner.
- Ensures only authorized replies are sent to third parties.
- Provides setup scripts for owner number registration and configuration generation.
- Requires OpenClaw with WhatsApp channel and owner's phone number.
Metadata
Frequently Asked Questions
What is Wa Relay?
WhatsApp message relay for OpenClaw v0.2.0. Routes third-party DMs to a relay agent that forwards them to the main agent via sessions_send. The main agent no... It is an AI Agent Skill for Claude Code / OpenClaw, with 843 downloads so far.
How do I install Wa Relay?
Run "/install wa-relay-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Wa Relay free?
Yes, Wa Relay is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Wa Relay support?
Wa Relay is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Wa Relay?
It is built and maintained by zarruk (@zarruk); the current version is v0.2.1.
More Skills