← Back to Skills Marketplace
247
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install pushplus-notification
Description
Send push notifications via pushplus HTTP API to WeChat, email, webhook, SMS and more. Use when the user asks to send notifications, push messages, WeChat me...
Usage Guidance
This skill appears coherent and low-risk: it only needs a PushPlus API token and uses curl to call the official PushPlus endpoints. Before installing or using it, consider: (1) Provide the token via environment variable rather than pasting it into chat to avoid leaking it in conversation history. (2) Confirm the agent follows the SKILL.md safety rules — especially that it asks you for confirmation before sending any message and does not store or print the full token. Because the skill is instruction-only, there is no code enforcing those rules; they depend on the agent implementation. (3) Avoid including sensitive secrets or PII in messages sent through a third-party service; if you must, review PushPlus’s privacy/security policy. (4) If the token is ever exposed, revoke/regenerate it immediately. If you want stronger guarantees, prefer a skill with audited code or one that performs token handling within vetted code rather than free-form agent instructions.
Capability Analysis
Type: OpenClaw Skill
Name: pushplus-notification
Version: 1.0.1
The pushplus-notification skill is a legitimate tool for sending notifications via the PushPlus HTTP API. The instructions in SKILL.md include proactive security measures, such as explicitly directing the AI agent to only extract the PUSHPLUS_TOKEN from .env files while ignoring other secrets, requiring user confirmation before execution, and masking tokens in logs. No malicious execution patterns or unauthorized data exfiltration behaviors were identified.
Capability Assessment
Purpose & Capability
Name/description match what the skill asks for: it sends messages via PushPlus and declares the single primary credential PUSHPLUS_TOKEN. No unrelated credentials, binaries, or install steps are requested.
Instruction Scope
SKILL.md gives concrete curl examples and a clear flow (fetch token from conversation/env/.env line, construct JSON, run curl). It explicitly instructs to only extract the PUSHPLUS_TOKEN line from .env and to always ask for user confirmation before sending. This is appropriately scoped, but because the skill is instruction-only there is no enforcement — the agent executing the instructions must actually follow the guidance (especially the '.env only the PUSHPLUS_TOKEN line' constraint and 'always confirm' rule).
Install Mechanism
No install spec or code is included (instruction-only). No downloads or archives. Low installation risk.
Credentials
Only the single PUSHPLUS_TOKEN credential is declared as primary and required. That is proportional to a notification-sending skill. The SKILL.md also warns not to log or store the token and provides guidance for safe handling.
Persistence & Privilege
always is false and the skill does not request system-level persistence or modify other skills. It does not ask to store credentials or write files (SKILL.md explicitly forbids storing the token).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pushplus-notification - After installation, invoke the skill by name or use
/pushplus-notification - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Version 1.1.0 — security and environment management improvements.
- Added explicit security requirements: require user confirmation before sending, warn on sensitive content, and never display or store full tokens.
- Updated token extraction: from .env, extract only the PUSHPLUS_TOKEN line to avoid leaking unrelated credentials.
- Documented required environment variable with a new requiredEnvVars section.
- Clarified .env usage and minimum read principle to enhance security.
- Incremented version metadata to 1.1.0.
v1.0.0
Initial release: Send push notifications via pushplus HTTP API
- Supports sending notifications to WeChat, email, webhook, SMS, and more using curl/Shell.
- No external dependencies required; only needs a PUSHPLUS_TOKEN.
- Instructions for both single and bulk message sending.
- Includes customizable templates and channels.
- Details usage, parameter options, sample commands, and best practices.
- Clear guidance on token handling and security.
Metadata
Frequently Asked Questions
What is pushplus?
Send push notifications via pushplus HTTP API to WeChat, email, webhook, SMS and more. Use when the user asks to send notifications, push messages, WeChat me... It is an AI Agent Skill for Claude Code / OpenClaw, with 247 downloads so far.
How do I install pushplus?
Run "/install pushplus-notification" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is pushplus free?
Yes, pushplus is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does pushplus support?
pushplus is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created pushplus?
It is built and maintained by 陈大人 (@pcstx); the current version is v1.0.1.
More Skills