Signal CLI

Send Signal messages and look up Signal recipients via the local signal-cli installation on macOS. Use when the user asks to message someone on Signal, send a Signal text/attachment, list Signal contacts, or resolve a recipient by name/nickname/phone number.

This skill is a thin wrapper around your local signal-cli and appears to do nothing beyond calling that binary. Before installing, ensure: (1) you have signal-cli and Python 3 installed and registered/running locally (the skill does not declare these dependencies), (2) you trust the agent to confirm recipients and message text (the scripts accept attachments and arbitrary file paths which, if chosen by an agent without confirmation, could leak local files), and (3) you keep autonomous invocation limited unless you trust the skill — require explicit user confirmation before sending messages or attaching files. If you want higher assurance, inspect the included scripts yourself and test them locally (they're short and readable).

Type: OpenClaw Skill Name: signal-cli Version: 0.1.0 The skill bundle is benign. Its functionality is clearly aligned with the stated purpose of interacting with `signal-cli` for messaging and contact lookup. The Python scripts (`scripts/find_contact.py`, `scripts/send_message.py`) correctly use `subprocess.run` with a list of arguments, mitigating shell injection risks. The `SKILL.md` instructions are well-behaved, providing clear guidance and including explicit safety checks for the AI agent to confirm sensitive information and ambiguous recipients with the user, rather than attempting prompt injection or malicious actions.