← Back to Skills Marketplace
g9pedro

Poke Bridge

by G9Pedro · GitHub ↗ · v0.6.5 · MIT-0
cross-platform ⚠ suspicious
114
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install poke
Description
Send SMS/iMessage to the user via Poke and process inbound Poke events. Use when the user asks to be texted, for SMS-based alerts, when processing events for...
Usage Guidance
Before installing or running these instructions: 1) Inspect the openclaw-poke npm package source (or run it in an isolated VM/container) — do not blindly run global npm installs from unknown publishers. 2) Backup any files the guide will modify (openclaw.json, the poke binary, node_modules) and verify the sed replacement strings are correct; consider asking the maintainer for an official fix rather than patching binary files. 3) Prefer OAuth rather than pasting API keys when possible, and review what data in openclaw.json will be read/written (it may contain bearer tokens). 4) Review the systemd unit content before enabling it; running a persistent service is expected but increases exposure. 5) If you cannot validate the npm package and the patch steps, consider using the alternative manual registration with a secure tunnel provider (Tailscale/ngrok) or ask for an audited release. 6) If you proceed, run the setup with least privilege (user-level, not root) and monitor changes (file diffs, service activation).
Capability Analysis
Type: OpenClaw Skill Name: poke Version: 0.6.5 The skill instructions in SKILL.md direct the agent to perform high-risk system modifications, including patching the 'poke' CLI binary and library files using sed to bypass SDK logic and establishing persistence via a systemd service for a network tunnel. While these actions are framed as a setup process for the Poke bridge, binary modification and automated tunnel persistence are significant security risks. Additionally, the skill requires global NPM installations and executes setup scripts (npx openclaw-poke setup) that interact with local configuration files like openclaw.json to extract auth tokens.
Capability Assessment
Purpose & Capability
Name/description align with the instructions: the SKILL.md details connecting an OpenClaw agent to a Poke relay, running an MCP server, and sending/receiving SMS. Requiring access to openclaw.json (gateway ports/tokens) and running a tunnel/service is coherent with that purpose.
Instruction Scope
Instructions go beyond simple configuration: they read/write openclaw.json, create and enable systemd services, invoke global npm installs and npx setup, and explicitly patch binaries and node_modules via sed. The binary/library patching is broad, invasive, and modifies installed code on disk — scope creep relative to a purely messaging bridge.
Install Mechanism
There is no registry install spec recorded; instead the SKILL.md instructs the operator to run `npm install -g openclaw-poke` and `npx openclaw-poke setup`. Pulling and running an unverified npm package is moderate risk. The included sed-based patches that alter CLI and SDK files are high risk because they edit installed artifacts in-place.
Credentials
The skill declares no required env vars, which matches the metadata. It does rely on reading/writing openclaw.json and on obtaining a Poke API key or OAuth. Access to openclaw.json may expose gateway/hook tokens; that is relevant to operation but should be reviewed before granting.
Persistence & Privilege
The setup creates persistent user systemd services and a long-running tunnel process, giving ongoing presence on the host. While expected for a tunnel, combined with in-place binary and module patches this grants substantial persistent modification of the environment and warrants caution.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install poke
  3. After installation, invoke the skill by name or use /poke
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.6.5
Auto-patches Poke SDK tunnel bug, auto-starts tunnel systemd service, README rewritten, versions synced
v0.6.1
Generic session targeting - agents discover their own session key via list_sessions instead of hardcoding
v0.6.0
v0.6.0: Full handshake setup, source routing ([Poke→OpenClaw] prefix), architecture split (Poke owns triggers, OpenClaw executes), session targeting, 8 MCP tools + 4 agent tools
Metadata
Slug poke
Version 0.6.5
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is Poke Bridge?

Send SMS/iMessage to the user via Poke and process inbound Poke events. Use when the user asks to be texted, for SMS-based alerts, when processing events for... It is an AI Agent Skill for Claude Code / OpenClaw, with 114 downloads so far.

How do I install Poke Bridge?

Run "/install poke" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Poke Bridge free?

Yes, Poke Bridge is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Poke Bridge support?

Poke Bridge is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Poke Bridge?

It is built and maintained by G9Pedro (@g9pedro); the current version is v0.6.5.

💬 Comments