← Back to Skills Marketplace
631
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install message-injector
Description
OpenClaw plugin that prepends custom text to every user message before it reaches the agent. Use for: enforcing memory_search before replies, injecting syste...
Usage Guidance
This skill appears internally consistent with its purpose. Before installing: (1) Understand it will prepend configured text to every user message at the gateway level and agents cannot ignore it — this can change behavior across all users and channels in the workspace. (2) Back up ~/.openclaw/openclaw.json before editing so you can revert. (3) Keep prependText free of secrets or personally identifying data (it will be sent with every message). (4) Installation is manual: the provided code is short and readable; review the included scripts/index.ts yourself (it simply returns prependContext when configured). (5) If you share this workspace, coordinate with other users because the injection is global. If you want scoped or temporary injection, consider toggling enabled or using a different mechanism that targets specific agents or channels.
Capability Analysis
Type: OpenClaw Skill
Name: message-injector
Version: 1.0.0
The OpenClaw Message Injector plugin is designed to prepend custom text to every user message before it reaches the AI agent. This functionality, while powerful and effectively a form of persistent prompt injection, is the plugin's stated purpose and is implemented without any malicious code or instructions. The `SKILL.md` documentation clearly explains this mechanism and provides examples for legitimate use cases such as enforcing memory search, adding context, or injecting safety rules. The `scripts/index.ts` code simply retrieves the user-configured `prependText` and returns it via the `prependContext` hook, without any file system operations, network calls, or attempts at data exfiltration, persistence, or unauthorized execution. The plugin itself is a neutral tool; its potential for misuse depends entirely on the text configured by the user, not on any inherent maliciousness in the plugin's design or implementation.
Capability Assessment
Purpose & Capability
Name/description claim to prepend text to every user message and the included plugin code and config schema implement exactly that behavior. There are no unrelated environment variables, binaries, or hidden capabilities requested.
Instruction Scope
SKILL.md instructs copying the provided plugin files into ~/.openclaw workspace and editing ~/.openclaw/openclaw.json — all actions relate to installing a workspace extension. The docs explicitly state the injection is applied at the Gateway level and cannot be skipped; this is expected but has privacy/behavioral impact (it affects every message). There are no instructions to read other unrelated files or transmit data externally.
Install Mechanism
No automated installer or remote download is used—installation is manual (copy local files and edit config). The package does not fetch archives or run external installers, so disk writes are limited to the extension directory and the user's OpenClaw config as instructed.
Credentials
The skill requires no environment variables, credentials, or special config paths beyond the workspace plugin placement and an entry in ~/.openclaw/openclaw.json. The runtime code accesses only the plugin config (prependText, enabled).
Persistence & Privilege
The plugin is persistent as a workspace extension (enabled in openclaw.json) and will affect all agent messages in that workspace/channels while enabled. It is not marked always:true and does not autonomously add itself, but it does change gateway behavior globally for the workspace when installed.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install message-injector - After installation, invoke the skill by name or use
/message-injector - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: prepend custom text to every user message via before_agent_start hook
Metadata
Frequently Asked Questions
What is Message Injector?
OpenClaw plugin that prepends custom text to every user message before it reaches the agent. Use for: enforcing memory_search before replies, injecting syste... It is an AI Agent Skill for Claude Code / OpenClaw, with 631 downloads so far.
How do I install Message Injector?
Run "/install message-injector" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Message Injector free?
Yes, Message Injector is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Message Injector support?
Message Injector is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Message Injector?
It is built and maintained by Leo_yang (@harukaon); the current version is v1.0.0.
More Skills