← Back to Skills Marketplace
819
Downloads
0
Stars
4
Active Installs
16
Versions
Install in OpenClaw
/install openclaw-onebot
Description
OneBot 11 channel plugin for QQ messaging (NapCat/go-cqhttp). Native OpenClaw integration with private/group chat, group reactions, block streaming, voice pi...
Usage Guidance
This plugin looks coherent for connecting OpenClaw to OneBot/NapCat, but take these precautions before installing: 1) inspect scripts/install.sh, scripts/sync-openclaw-cli.mjs and package.json npm scripts in the repo — they will run arbitrary code when executed; 2) restrict sharedDir to a dedicated, minimal-permission folder (do not point it at your home or sensitive data); 3) verify wsUrl/httpUrl point to a trusted NapCat/go-cqhttp host and use an access token if available; 4) consider running the install inside a container or isolated environment first; 5) prefer installing from the upstream GitHub repo (the README references a GitHub URL) or another trusted source rather than an unknown package archive.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-onebot
Version: 1.2.12
The provided files (SKILL.md, README.md, and metadata) describe a legitimate OpenClaw channel plugin for OneBot 11 (QQ) integration. The documentation outlines standard installation procedures via npm and shell scripts, configuration for WebSocket/HTTP endpoints, and features like voice processing (SILK/AMR to MP3) and message streaming. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found; the requested permissions and external tool dependencies (ffmpeg, uv) are consistent with the stated purpose of a messaging channel plugin.
Capability Tags
Capability Assessment
Purpose & Capability
The name/description (OneBot 11 channel plugin for QQ) match the declared requirements: node/npm and the two OpenClaw config paths channels.onebot.wsUrl and channels.onebot.httpUrl. Optional items mentioned in the docs (ffmpeg, pilk/uv) are reasonable for the documented voice pipeline and are not listed as required env secrets.
Instruction Scope
SKILL.md is mostly scoped to building/installing the plugin and updating openclaw.json (setting wsUrl/httpUrl/accessToken/sharedDir). It instructs running local scripts (bash scripts/install.sh, npm scripts, scripts/sync-openclaw-cli.mjs) and OpenClaw CLI commands. Those actions are expected for this plugin, but the docs ask the user/agent to execute repository scripts that can run arbitrary code — the repo's scripts should be inspected/verified before execution.
Install Mechanism
There is no formal install spec in the registry (instruction-only). Installation is via repository-provided bash/npm scripts and openclaw CLI. This avoids remote binary downloads in the skill metadata, but npm/shell scripts in the package will execute on the host if run — review package scripts and install.sh prior to running to avoid unexpected actions.
Credentials
The skill does not request any secrets from the registry metadata; it requires two config paths (wsUrl/httpUrl) appropriate for a OneBot channel. The docs mention an optional ONEBOT_ACCESS_TOKEN (expected). The plugin uses a sharedDir/containerSharedDir to stage media — this gives the plugin/agent access to files in that host path and should be limited to a dedicated directory with minimal permissions.
Persistence & Privilege
always: false and default autonomous invocation are set (normal). The skill will be installed as an OpenClaw plugin via openclaw plugins install and writes plugin entries into OpenClaw-managed config — expected for a channel plugin. It does not request elevated platform privileges in the metadata.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-onebot - After installation, invoke the skill by name or use
/openclaw-onebot - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.2.12
Document the OpenClaw OneBot security-audit cleanup and current verification flow.
v1.2.11
Refresh OpenClaw OneBot setup guidance and package/plugin compatibility metadata.
v1.2.10
Release 1.2.10: add generic sendMedia outbound support for image, audio, and file delivery across delivery recovery, mirror, and message-tool paths; update the test suite to 116 passing tests; refresh release docs and metadata for the runtime package flow.
v1.2.9
Refresh the published skill for the OpenClaw 2026.4.9 / plugin-sdk 2026.4.9 release, including setupEntry support, release-package install flow, and updated 112-test verification metadata.
v1.2.8
Release 1.2.8: 106 tests passing, coverage verified, and refreshed OneBot channel documentation.
v1.2.7
- Improved channel filtering and allowFrom logic for QQ message routing and authorization.
- Enhanced test coverage of channel actions and filtering behavior.
- Updated dependencies in package.json and package-lock.json.
- Minor code structure and type improvements in channel implementation.
v1.2.6
fix: normalizeTarget should return string, not object — fixes message tool 'to required' error when sending to onebot group targets
v1.2.5
Fix OneBot text command authorization so built-in OpenClaw commands like /status, /help, /commands, /model, /new, and /reset work over QQ. Add regression coverage for command passthrough, allowFrom gating, timeout handling, and e2e message delivery.
v1.2.4
Simplify ClawHub SKILL.md frontmatter and switch to a README-style markdown body for better compatibility with ClawHub rendering and scanning.
v1.2.3
Optimize ClawHub skill formatting for plain markdown rendering and replace wide comparison tables with compact comparison sections.
v1.2.2
Clarify installer requirements, write paths, safety boundaries, user confirmation rules, and source verification steps for ClawHub.
v1.2.1
Expand ClawHub skill overview with feature comparison, OpenClaw config examples, capability boundaries, and verification guidance.
v1.2.0
Add block streaming, group reactions, default automatic group reactions, and refreshed installation guidance.
v1.1.2
- Added comprehensive test suite with 16 new files, including channel, gateway, config, outbound, and runtime tests.
- Added README.md for documentation.
- Added package-lock.json for dependency locking.
- Updated package.json for test and build tooling.
- No functional changes to runtime code; this release enhances testing and developer documentation.
v1.1.1
v1.1.1: Add ClawHub suspicious flag explanation (.ts MIME false positive)
v1.1.0
v1.1.0: Voice pipeline (SILK/AMR → MP3 → STT/TTS auto), message batching (1.5s debounce), 58 tests
Metadata
Frequently Asked Questions
What is OpenClaw OneBot?
OneBot 11 channel plugin for QQ messaging (NapCat/go-cqhttp). Native OpenClaw integration with private/group chat, group reactions, block streaming, voice pi... It is an AI Agent Skill for Claude Code / OpenClaw, with 819 downloads so far.
How do I install OpenClaw OneBot?
Run "/install openclaw-onebot" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OpenClaw OneBot free?
Yes, OpenClaw OneBot is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does OpenClaw OneBot support?
OpenClaw OneBot is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OpenClaw OneBot?
It is built and maintained by Jerry (@xucheng); the current version is v1.2.12.
More Skills