← Back to Skills Marketplace
1854
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install tt
Description
Send WhatsApp messages to other people or search/sync WhatsApp history via the wacli CLI (not for normal user chats).
Usage Guidance
This skill appears to be what it claims, but it controls a tool that can message real people and uses local WhatsApp auth data. Before installing: (1) verify you trust the upstream project (https://wacli.sh and the GitHub repo) since the Homebrew tap and go module install third‑party code; (2) be aware wacli uses ~/.wacli for credentials—inspect that directory if needed and avoid sharing it; (3) confirm recipients and message content every time (the SKILL.md also requires this); (4) consider running wacli in a sandbox/container or installing it only when you need the capability; and (5) review wacli's documentation and source if you need stronger assurance about what the binary will do.
Capability Analysis
Type: OpenClaw Skill
Name: tt
Version: 1.0.0
The skill bundle is classified as suspicious due to the inherent high-risk capability of the `wacli` tool to send arbitrary files from the agent's environment via WhatsApp, as demonstrated by the `wacli send file` command in `SKILL.md`. While the `SKILL.md` includes safety instructions for the agent (e.g., 'Require explicit recipient + message text', 'Confirm recipient + message before sending') which mitigate direct prompt injection for unauthorized actions, the underlying capability for broad file access and exfiltration through WhatsApp remains a significant risk.
Capability Assessment
Purpose & Capability
Name/description, required binaries, and runtime instructions all align with a WhatsApp CLI integration. The skill only requires the wacli binary and the described commands (send, search, sync, backfill) match the documented purpose.
Instruction Scope
SKILL.md limits actions to explicit user requests to message third parties or sync/search history. It references the wacli store dir (~/.wacli) and sending files via --file, which is expected for a messaging CLI. There are no instructions to read unrelated system paths or environment variables.
Install Mechanism
Installers are Homebrew formula steipete/tap/wacli and a go module github.com/steipete/wacli — both are standard ways to obtain the wacli binary. This is reasonable, but installing from a third‑party Homebrew tap or building from a GitHub module carries normal third‑party code trust risk; review the upstream project if you need stronger assurance.
Credentials
The skill declares no environment variables or credentials. It does use the wacli store (~/.wacli) for auth, which is appropriate for a WhatsApp client and is disclosed in the instructions.
Persistence & Privilege
The skill is not always-enabled and does not request system-wide privileges. It relies on the installed wacli binary and the user's WhatsApp auth (QR-based) stored in ~/.wacli; it does not itself request persistent platform privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tt - After installation, invoke the skill by name or use
/tt - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
wacli skill initial release: A new skill for sending WhatsApp messages to others and managing history via the wacli CLI.
- Enables message sending, chat search, and history sync/backfill using wacli.
- Not for normal user chats—use only when explicitly requested to contact a third party or manage WhatsApp history.
- Safety checks require explicit recipient and message, and confirmation before sending.
- Includes command references for authentication, sync, chat/message search, backfill, and file transfer.
- Provides installation instructions for wacli via Homebrew or Go.
Metadata
Frequently Asked Questions
What is jj?
Send WhatsApp messages to other people or search/sync WhatsApp history via the wacli CLI (not for normal user chats). It is an AI Agent Skill for Claude Code / OpenClaw, with 1854 downloads so far.
How do I install jj?
Run "/install tt" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is jj free?
Yes, jj is completely free (open-source). You can download, install and use it at no cost.
Which platforms does jj support?
jj is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created jj?
It is built and maintained by rafay0313 (@rafay0313); the current version is v1.0.0.
More Skills