← Back to Skills Marketplace
241
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install matrix-openapi-skill
Description
Operate Matrix Client-Server API through UXC with a curated OpenAPI schema, bearer-token auth, and homeserver-aware messaging guardrails.
Usage Guidance
This skill appears to do what it says (operate Matrix via a curated OpenAPI schema), but the package metadata omits things the runtime explicitly needs. Before installing: (1) verify you have and trust the uxc CLI and ripgrep (rg) on the host, since SKILL.md and scripts expect them; (2) do not supply a high-privilege MATRIX_ACCESS_TOKEN to an untrusted skill — confirm the maintainer and repository; (3) ask the publisher to update registry metadata to declare required binaries (uxc, rg) and required env vars (e.g., MATRIX_ACCESS_TOKEN) so you can review them at install time; (4) be aware the skill can send room messages if given a valid token — ensure you want the agent to have that capability and consider using a token with limited scope or a throwaway/test account. If you want stronger assurance, inspect the included OpenAPI schema and SKILL.md thoroughly or run the skill in an isolated environment/account first.
Capability Analysis
Type: OpenClaw Skill
Name: matrix-openapi-skill
Version: 1.0.0
The skill bundle provides a legitimate interface for interacting with the Matrix Client-Server API using the `uxc` tool. It includes a curated OpenAPI schema (`matrix-client-server.openapi.json`), clear authentication procedures for OAuth and bearer tokens, and sensible guardrails for high-risk operations like sending messages. The instructions in `SKILL.md` and `usage-patterns.md` are consistent with the stated purpose, and the validation script (`scripts/validate.sh`) ensures the integrity of the documentation and configuration.
Capability Assessment
Purpose & Capability
The skill's purpose (Matrix Client-Server API operations) matches the instructions and included OpenAPI schema. However the SKILL.md lists prerequisites (uxc CLI and a Matrix access token) and the validate script requires 'rg' (ripgrep), but the registry metadata declares no required binaries or env vars. Missing these declarations is an incoherence: a Matrix access token and uxc are reasonably required, but they should be declared in the metadata.
Instruction Scope
The SKILL.md instructs the agent to perform auth setup (including setting a secret from env MATRIX_ACCESS_TOKEN), to link a CLI, and to start background /sync subscriptions that write to $HOME/.uxc/subscriptions/*. These actions are within the skill's stated purpose, but the instructions explicitly reference an environment variable (MATRIX_ACCESS_TOKEN) and perform file writes without the registry metadata documenting those requirements — that mismatch expands the effective runtime scope unexpectedly.
Install Mechanism
This is an instruction-only skill with no install spec. Nothing will be downloaded or written by an installer step. The only included script is a validation helper; no remote install URLs are present.
Credentials
The SKILL.md expects a Matrix access token (shown via --secret-env MATRIX_ACCESS_TOKEN) which is the normal credential for this purpose, but the skill metadata lists no required env vars or primary credential. That omission prevents users/administrators from seeing at install-time that a secret will be consumed by the skill. Requesting a homeserver access token is proportionate to the purpose, but the metadata should declare it.
Persistence & Privilege
The skill is not force-included (always: false) and does not request any special platform privileges. It can be invoked autonomously by the agent (default), which is normal for skills; combined with the undisclosed access token requirement this is a moderate operational consideration but not by itself a privilege escalation.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install matrix-openapi-skill - After installation, invoke the skill by name or use
/matrix-openapi-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
matrix-openapi-skill 1.0.0
- Initial release of the Matrix Client-Server API skill for UXC.
- Supports key Matrix operations: token owner lookup, joined rooms, room state, sync polling, user profile/presence, and room messaging.
- Configurable for any homeserver with bearer-token authentication.
- Provides guardrails for safe message sends and polling workflows.
- Includes detailed setup and CLI usage instructions for integration with UXC.
Metadata
Frequently Asked Questions
What is Matrix OpenAPI Skill?
Operate Matrix Client-Server API through UXC with a curated OpenAPI schema, bearer-token auth, and homeserver-aware messaging guardrails. It is an AI Agent Skill for Claude Code / OpenClaw, with 241 downloads so far.
How do I install Matrix OpenAPI Skill?
Run "/install matrix-openapi-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Matrix OpenAPI Skill free?
Yes, Matrix OpenAPI Skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Matrix OpenAPI Skill support?
Matrix OpenAPI Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Matrix OpenAPI Skill?
It is built and maintained by jolestar (@jolestar); the current version is v1.0.0.
More Skills