← Back to Skills Marketplace
Qmsg Push
by
TimeThreeSecond
· GitHub ↗
· v0.1.0
· MIT-0
74
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install qmsg-push-skills
Description
Qmsg 酱推送，通过 QQ 主动发送消息通知，无需 API Key
Usage Guidance
Do not install blindly. The skill actually requires a Qmsg KEY (contradicting the 'no API Key' description) and expects a secrets.json but the path is ambiguous: SKILL.md says ~/.workbuddy/secrets.json while the script reads secrets.json from its own directory. Before installing, verify where you'll store the key, confirm the script's path and behavior, and ensure you trust qmsg.zendee.cn because the key and message content will be sent to that external service. If you proceed, either (a) update the script to read the secret from a secure, declared location (or an explicitly declared env var), or (b) place the secrets.json only in a secure folder you control. If anything about the secret handling remains unclear, treat this skill as untrusted.
Capability Analysis
Type: OpenClaw Skill
Name: qmsg-push-skills
Version: 0.1.0
The skill is a legitimate implementation for sending QQ notifications via the Qmsg service (qmsg.zendee.cn). The Python script `qmsg_push.py` reads a local API key from a JSON file and sends messages using the requests library as described in the documentation. No evidence of data exfiltration to unauthorized endpoints, malicious execution, or prompt injection was found.
Capability Tags
Capability Assessment
Purpose & Capability
The skill's declared purpose (push messages via qmsg.zendee.cn) matches the included script which calls that service. However the README/SKILL.md claim '无需 API Key' while both the README and script require a Qmsg KEY — this contradiction is significant.
Instruction Scope
SKILL.md and README instruct the agent to read a secrets file (~/.workbuddy/secrets.json) and the script reads a secrets.json file, but the script looks for secrets.json in its own directory (path mismatch). The skill also tells an agent to 'create temporary agent' and read local secret files — reading local secrets is within the feature's scope but the undocumented/ambiguous path and the SKILL.md/registry not declaring the config path is a scope-management problem.
Install Mechanism
Instruction-only skill with a small Python script included and no install spec; nothing is downloaded or written by an installer. Low install risk.
Credentials
Registry metadata declares no required env vars/config paths/primary credential, yet the README and code require a Qmsg KEY stored in a secrets.json file. The skill fails to declare its required secret and contradicts its 'no API Key' claim — this is disproportionate and confusing for users.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills. Normal agent invocation is allowed (default).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install qmsg-push-skills - After installation, invoke the skill by name or use
/qmsg-push-skills - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
- Initial release of qmsg-push skill.
- Supports sending push notifications to QQ via Qmsg 酱 without requiring an API Key.
- Provides setup instructions and usage workflow for integration with Workbuddy automation.
Metadata
Frequently Asked Questions
What is Qmsg Push?
Qmsg 酱推送，通过 QQ 主动发送消息通知，无需 API Key. It is an AI Agent Skill for Claude Code / OpenClaw, with 74 downloads so far.
How do I install Qmsg Push?
Run "/install qmsg-push-skills" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Qmsg Push free?
Yes, Qmsg Push is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Qmsg Push support?
Qmsg Push is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Qmsg Push?
It is built and maintained by TimeThreeSecond (@timethreesecond); the current version is v0.1.0.
More Skills