← Back to Skills Marketplace
WhatsApp Contacts
by
Marcos Santos
· GitHub ↗
· v1.0.0
623
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install whatsapp-contacts
Description
List, search, and lookup WhatsApp contacts from the Baileys session cache
Usage Guidance
This skill appears to do what it says: read a local Baileys session cache and list/search contacts. Before installing, consider: (1) the script needs read access to your OpenClaw state directory (default ~/.openclaw/credentials/whatsapp/default) which may contain sensitive WhatsApp session data — only install if you trust the skill and the environment; (2) the code is bundled with the skill (inspect it yourself); it currently only outputs contact info as JSON, but a modified version could exfiltrate data, so avoid giving the agent broad network/file privileges if you don't trust the source; (3) if you prefer narrower scope, run the script locally yourself instead of allowing autonomous agent invocation.
Capability Analysis
Type: OpenClaw Skill
Name: whatsapp-contacts
Version: 1.0.0
The skill is classified as suspicious due to its direct access to sensitive local files containing WhatsApp session and contact data. The `scripts/contacts.js` file reads from `process.env.OPENCLAW_STATE_DIR/credentials/whatsapp/default/store.json` or `contacts.json`. While this behavior aligns with the skill's stated purpose of listing and searching WhatsApp contacts, accessing such sensitive local credential/session stores represents a significant high-risk capability. There is no evidence of data exfiltration, persistence, or other malicious intent within the skill's code itself, but the exposure of this sensitive data via `console.log` could be leveraged by a malicious agent prompt for unauthorized exfiltration.
Capability Assessment
Purpose & Capability
Name/description claim (read contacts from Baileys session cache) matches the included script and SKILL.md. The script looks in a local OpenClaw state path (OPENCLAW_STATE_DIR or ~/.openclaw/credentials/whatsapp/default) for store.json or contacts.json and extracts contacts.
Instruction Scope
SKILL.md instructs the agent to run the bundled Node script with specific commands (list/search/get). The script only reads local files in the stated session directory and prints JSON results; it does not instruct the agent to read arbitrary system files, call external endpoints, or access unrelated environment variables.
Install Mechanism
No install spec or remote downloads; the skill is instruction-only with a single bundled script. Nothing is written to disk by an installer, and no external packages or URLs are fetched at install time.
Credentials
The skill declares no required environment variables or credentials. The script optionally respects OPENCLAW_STATE_DIR to locate the session, which is reasonable. Caution: the script reads the WhatsApp session store (store.json) which can contain sensitive session data; although the code only extracts and prints contact entries, it still requires read access to a credential directory and will load the file into memory.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system configuration, and only performs read operations. It does not persist new credentials or change agent settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install whatsapp-contacts - After installation, invoke the skill by name or use
/whatsapp-contacts - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release. Provides offline access to WhatsApp contacts from Baileys session cache. Supports listing, searching by name/phone, and detailed contact lookup. No live connection required.
Metadata
Frequently Asked Questions
What is WhatsApp Contacts?
List, search, and lookup WhatsApp contacts from the Baileys session cache. It is an AI Agent Skill for Claude Code / OpenClaw, with 623 downloads so far.
How do I install WhatsApp Contacts?
Run "/install whatsapp-contacts" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is WhatsApp Contacts free?
Yes, WhatsApp Contacts is completely free (open-source). You can download, install and use it at no cost.
Which platforms does WhatsApp Contacts support?
WhatsApp Contacts is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created WhatsApp Contacts?
It is built and maintained by Marcos Santos (@marcosrippel); the current version is v1.0.0.
More Skills