← Back to Skills Marketplace
rcs-message
by
longbiao515
· GitHub ↗
· v1.0.5
· MIT-0
291
Downloads
0
Stars
0
Active Installs
6
Versions
Install in OpenClaw
/install rcs-message
Description
RCS Message, the upgraded 5G intelligent SMS, supports mass sending and forwarding of text & template messages directly via phone numbers. No app download is...
Usage Guidance
This skill appears to implement an RCS/SMS sender, but you should be cautious before installing or running it: (1) The package and docs are inconsistent — verify the correct API hostname and that '5g.fontdo.com' is the legitimate provider you expect. (2) The scripts will ask for your APP_ID/APP_SECRET and save them in plaintext under your home directory (several different paths are used). If you must use it, prefer setting environment variables temporarily, inspect the code yourself, and run the tool in an isolated environment (container or VM). (3) After use, remove any saved credential files (check ~/.config/moltbot/ and ~/.5g_messaging/) or rotate the credentials. (4) If you cannot verify the provider or are uncomfortable storing secrets unencrypted, do not install or run this skill.
Capability Analysis
Type: OpenClaw Skill
Name: rcs-message
Version: 1.0.5
The skill bundle provides a legitimate integration for sending RCS and SMS messages via the Fontdo 5G messaging platform (5g.fontdo.com). It features robust input validation, rate limiting (60-second intervals), and privacy protection utilities in `privacy_protect.py` to mask sensitive data in logs. While it stores API credentials in the user's home directory (`~/.config/moltbot/`), this is a standard practice for persistent CLI/agent authentication and shows no evidence of malicious intent or unauthorized data exfiltration.
Capability Assessment
Purpose & Capability
The code implements an RCS/SMS group-sending client and requires APP_ID/APP_SECRET to call https://5g.fontdo.com — which is coherent with the stated purpose. However, the registry metadata claims no required env vars while SKILL.md and all code clearly need credentials; example configs and usage docs reference different server hosts (api.5g-messaging.com, FIVE_G_SERVER_ROOT) producing internal inconsistencies.
Instruction Scope
Runtime instructions and code prompt for credentials, set environment variables, and write/read session credential files under the user's home directory. The skill will ask for APP_ID/APP_SECRET interactively and persist them. While network calls are limited to the declared API endpoint, the instructions/code access and persist user secrets and several filesystem locations (multiple different paths are used in different modules), which expands the scope beyond a transient send action.
Install Mechanism
No install spec / external downloads are present; this is instruction + local Python code that runs on the host. Nothing in the manifest attempts to fetch or execute remote archives at install time.
Credentials
The skill legitimately needs an APP_ID and APP_SECRET to call the provider API, but it stores those secrets unencrypted in multiple locations under the user's home directory (~/.5g_messaging/credentials.json, ~/.config/moltbot/5g_messaging, ~/.config/moltbot/rcs-message/<session>.json). The registry metadata omitted required env vars (discrepancy). There are no unrelated third-party credentials requested, but persistent plaintext storage of secrets is a privacy/security risk.
Persistence & Privilege
The skill creates persistent files and directories in the user's home (both ~/.5g_messaging and ~/.config/moltbot/...), and stores credentials there. It does not request elevated system privileges or mark itself always:true, but persistent unencrypted credential storage and multiple differing storage locations are concerning and increase blast radius if the host is compromised.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install rcs-message - After installation, invoke the skill by name or use
/rcs-message - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.5
- Updated SKILL.md description to emphasize mass sending, forwarding, and real-name security features.
- Improved description of media types supported (images, videos, interactive cards).
- Updated feature list to highlight one-stop inquiry, reservation, payment, and business handling.
- No code or structural changes; documentation update only.
v1.0.4
Version 1.0.4
- Added a detailed skill description highlighting RCS message features, benefits, and use cases.
- No other changes detected in the files or functionality.
v1.0.3
update info
v1.0.2
- Revised documentation for clarity, structure, and broader audience (now in English).
- Added detailed API endpoint and configuration instructions, including environment variable setup.
- Expanded parameter table and usage examples for various message types and fallback scenarios.
- Introduced a "Troubleshooting" section with common issues and solutions.
- Enhanced security and validation rule explanations.
- No code changes; documentation update only.
v1.0.1
Send and receive SMS / RCS via the mobile SMS interface.Use when the user asks to send a text message, check text messages, use SMS, text message, RCS, or needs to forward or mass send received text messages.
v1.0.0
Initial release of the rcs-message skill:
- Provides secure RCS message broadcast/forwarding with support for template and text messages.
- Enforces limits on numbers (max 100 per send), message length (1000 chars), and request rate (10/minute).
- Automatically parses user input for keywords like "群发消息" ("broadcast message") and "转发消息" ("forward message").
- Handles configuration for API server address and per-session app credential management.
- Supports command-line and environment variable configuration for advanced use.
- Includes clear usage examples for both text and template message scenarios.
Metadata
Frequently Asked Questions
What is rcs-message?
RCS Message, the upgraded 5G intelligent SMS, supports mass sending and forwarding of text & template messages directly via phone numbers. No app download is... It is an AI Agent Skill for Claude Code / OpenClaw, with 291 downloads so far.
How do I install rcs-message?
Run "/install rcs-message" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is rcs-message free?
Yes, rcs-message is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does rcs-message support?
rcs-message is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created rcs-message?
It is built and maintained by longbiao515 (@longbiao515); the current version is v1.0.5.
More Skills