← Back to Skills Marketplace
test
by
fianabates1
· GitHub ↗
· v1.0.0
1441
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install test-wa
Description
Send WhatsApp messages to other people or search/sync WhatsApp history via the wacli CLI (not for normal user chats).
Usage Guidance
This skill appears to do what it says: it invokes the wacli CLI to authenticate, sync, search history, and send messages/files. Before installing or using it:
- Verify the wacli project and Homebrew tap (steipete) are the official sources you expect (review the GitHub repo and tap) because 'go @latest' and third-party brew taps pull upstream code at install time.
- Understand privacy implications: using this skill will access your WhatsApp session directory (~/.wacli), allow searching message history, and can upload local files specified by the agent. Only use it when the user explicitly requests messaging a third party.
- Be cautious about automatic use: the SKILL.md sensibly requires explicit recipient and message confirmation; ensure the agent follows those safeguards before sending anything.
- Note the metadata mismatch (registry owner/slug vs _meta.json). That suggests the package metadata/packaging may be inconsistent—if provenance matters to you, confirm the publisher before trusting it with your WhatsApp account.
Capability Analysis
Type: OpenClaw Skill
Name:
Developer:
Version:
Description: OpenClaw Agent Skill
The skill bundle is suspicious due to the `wacli send file` command described in `SKILL.md`. This command allows the agent to read arbitrary local files and send them via WhatsApp, posing a significant data exfiltration risk if the agent is compromised via prompt injection to target sensitive files (e.g., `~/.ssh/id_rsa`, `~/.aws/credentials`). While the instructions themselves include safety measures, the underlying capability is high-risk. Additionally, the installation instructions for `wacli` involve fetching from external sources (`github.com/steipete/wacli`), introducing a supply chain risk.
Capability Assessment
Purpose & Capability
The description, required binary (wacli), and install specs (brew formula and Go module) align with the stated purpose of sending/searching WhatsApp messages. Minor metadata inconsistencies exist: the registry metadata (owner/slug) differs from the _meta.json/skill metadata (ownerId/slug 'wacli'), which is suspicious from a provenance/integrity standpoint but does not change the tool's declared capabilities.
Instruction Scope
SKILL.md instructs the agent to run wacli commands only for auth, sync, searching history, and sending messages/files. It references expected local paths (store dir ~/.wacli and arbitrary file paths when sending files) which is consistent with a CLI that stores session data and can upload local files. Note: access to ~/.wacli and arbitrary local file paths is necessary for this tool but is a privacy-sensitive capability (message history and local files).
Install Mechanism
Install options are standard: a Homebrew formula (steipete/tap/wacli) and a Go module (github.com/steipete/wacli/cmd/wacli@latest). These are expected for distributing a CLI. The Go 'latest' install pulls current upstream code at install time (moderate risk if you don't audit the repo); brew from a third-party tap is also reasonable but should be verified.
Credentials
No environment variables, extra credentials, or unrelated config paths are requested. The skill does not ask for unrelated secrets or wide-ranging environment access in its manifest.
Persistence & Privilege
always is false and the skill is instruction-only (no bundled code). It does not request persistent or elevated platform privileges or attempt to modify other skills' configs. It will naturally read/write the CLI's store directory (~/.wacli) as part of normal operation.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install test-wa - After installation, invoke the skill by name or use
/test-wa - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
test
Metadata
Frequently Asked Questions
What is test?
Send WhatsApp messages to other people or search/sync WhatsApp history via the wacli CLI (not for normal user chats). It is an AI Agent Skill for Claude Code / OpenClaw, with 1441 downloads so far.
How do I install test?
Run "/install test-wa" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is test free?
Yes, test is completely free (open-source). You can download, install and use it at no cost.
Which platforms does test support?
test is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created test?
It is built and maintained by fianabates1 (@fianabates1); the current version is v1.0.0.
More Skills