功能描述

Discord Bot API integration — manage servers, channels, messages, roles, members, and webhooks via the Discord REST API. Send messages, manage server setting...

使用说明 (SKILL.md)

🤖 Discord Bot

Name: Discord Bot
Author: aiwithabidi

Discord Bot API integration — manage servers, channels, messages, roles, members, and webhooks via the Discord REST API.

Features

Send messages — text, embeds, files to any channel
Channel management — create, update, delete channels
Server info — guild details, settings, and statistics
Member management — list, kick, ban, role assignment
Role management — create, update, assign roles
Message operations — send, edit, delete, react, pin
Webhook management — create and send via webhooks
Thread management — create and manage threads
Emoji management — list and manage custom emojis
Audit log — view server audit events

Requirements

Variable	Required	Description
`DISCORD_BOT_TOKEN`	✅	API key/token for Discord Bot

Quick Start

# List bot's servers
python3 {baseDir}/scripts/discord-bot.py guilds

# Get server details
python3 {baseDir}/scripts/discord-bot.py guild-get 123456789

# List server channels
python3 {baseDir}/scripts/discord-bot.py channels --guild 123456789

# Create a channel
python3 {baseDir}/scripts/discord-bot.py channel-create --guild 123456789 "general-chat" --type text

Commands

`guilds`

List bot's servers.

python3 {baseDir}/scripts/discord-bot.py guilds

`guild-get`

Get server details.

python3 {baseDir}/scripts/discord-bot.py guild-get 123456789

`channels`

List server channels.

python3 {baseDir}/scripts/discord-bot.py channels --guild 123456789

`channel-create`

Create a channel.

python3 {baseDir}/scripts/discord-bot.py channel-create --guild 123456789 "general-chat" --type text

`channel-update`

Update channel.

python3 {baseDir}/scripts/discord-bot.py channel-update 987654321 '{"name":"announcements","topic":"Important updates"}'

`send`

Send a message.

python3 {baseDir}/scripts/discord-bot.py send --channel 987654321 "Hello from the bot!"

`send-embed`

Send embed message.

python3 {baseDir}/scripts/discord-bot.py send-embed --channel 987654321 '{"title":"Update","description":"New feature released","color":5814783}'

`messages`

List channel messages.

python3 {baseDir}/scripts/discord-bot.py messages --channel 987654321 --limit 20

`message-edit`

Edit a message.

python3 {baseDir}/scripts/discord-bot.py message-edit --channel 987654321 --message 111222333 "Updated text"

`message-delete`

Delete a message.

python3 {baseDir}/scripts/discord-bot.py message-delete --channel 987654321 --message 111222333

`react`

Add reaction to message.

python3 {baseDir}/scripts/discord-bot.py react --channel 987654321 --message 111222333 --emoji 👍

`members`

List server members.

python3 {baseDir}/scripts/discord-bot.py members --guild 123456789 --limit 50

`roles`

List server roles.

python3 {baseDir}/scripts/discord-bot.py roles --guild 123456789

`role-assign`

Assign role to member.

python3 {baseDir}/scripts/discord-bot.py role-assign --guild 123456789 --user 444555666 --role 777888999

`webhooks`

List channel webhooks.

python3 {baseDir}/scripts/discord-bot.py webhooks --channel 987654321

Output Format

All commands output JSON by default. Add --human for readable formatted output.

# JSON (default, for programmatic use)
python3 {baseDir}/scripts/discord-bot.py guilds --limit 5

# Human-readable
python3 {baseDir}/scripts/discord-bot.py guilds --limit 5 --human

Script Reference

Script	Description
`{baseDir}/scripts/discord-bot.py`	Main CLI — all Discord Bot operations

Data Policy

This skill never stores data locally. All requests go directly to the Discord Bot API and results are returned to stdout. Your data stays on Discord Bot servers.

Credits

Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.

📅 Need help setting up OpenClaw for your business? Book a free consultation

安全使用建议

This skill is internally inconsistent and should be reviewed/fixed before you provide a real bot token or run it in a production environment. Specific points to consider: - Do not supply your production DISCORD_BOT_TOKEN until the script is fixed and reviewed. Use a test bot with minimal permissions for experiments. - Code issues to fix or verify: change Authorization header to 'Bot <token>' (not 'Bearer'), and update the HTTP endpoints and methods to match Discord's documented API (e.g., POST /guilds/{guild.id}/channels to create channels, etc.). Many functions currently call nonstandard paths and HTTP verbs and will fail or behave unpredictably. - The script will try to read ~/.openclaw/workspace/.env (or a WORKSPACE-specified path) if DISCORD_BOT_TOKEN isn't set. This file-read is not declared in SKILL.md — consider removing this fallback or documenting it, since it can access arbitrary files in your home/workspace. - Because the implementation appears buggy, run the CLI in an isolated environment (sandbox/container) and with a test bot account to observe actual network requests. Inspect and/or instrument the script (or run it under a network debugger) to confirm which endpoints it calls. - If you are the maintainer or plan to use this skill, request an updated version from the author that fixes the Authorization header, corrects endpoints/methods, removes undocumented file reads, and documents behavior explicitly. If the author provides a corrected version, re-evaluate; if they explain the odd endpoints are placeholders or proxies and provide secure justification, that could change this assessment. Confidence is medium: the issues look like sloppy/incorrect implementation rather than clearly malicious intent, but the undocumented file access and protocol errors justify caution.

功能分析

Type: OpenClaw Skill Name: discord-bot Version: 1.0.0 The skill is classified as suspicious primarily due to the `get_token()` function in `scripts/discord-bot.py`. While the skill requires the `DISCORD_BOT_TOKEN`, the function attempts to read it not only from environment variables but also by parsing a `.env` file located at `~/.openclaw/workspace/.env` (or a path derived from `WORKSPACE`). This broad file access to a workspace `.env` file, even if currently only extracting the specific `DISCORD_BOT_TOKEN`, represents a potential information disclosure vulnerability if the `.env` file contains other sensitive data and the parsing logic were less specific or if the `WORKSPACE` environment variable could be manipulated. Additionally, the Python script contains significant functional bugs in its `argparse` implementation and Discord API path construction, rendering most of its advertised commands non-functional, which, while not a security vulnerability, impacts its intended operation.

能力评估

⚠ Purpose & Capability

The skill name/description (Discord bot management) aligns with the code’s intent (HTTP calls to discord.com). However the actual HTTP paths and methods in the script are incorrect/implausible for the real Discord REST API (e.g., using endpoints like /guild/get, /channel/create, /message/edit instead of Discord’s documented endpoints), and the script uses Authorization: Bearer <token> while Discord bot tokens require the Authorization: Bot <token> header. These mismatches mean the script likely will not function as advertised and raise concerns about correctness.

⚠ Instruction Scope

SKILL.md states 'never stores data locally' and declares only DISCORD_BOT_TOKEN as required, but the runtime script attempts to read an .env file from a workspace path (constructed from WORKSPACE or ~/.openclaw/workspace/.env) if the environment variable is absent. Reading files from the user home/workspace is outside what the skill declares and is unexpected scope creep. The SKILL.md instructions do not mention this fallback behavior.

✓ Install Mechanism

This is instruction-only with an included Python script and no install spec — nothing is automatically downloaded or written to disk by an installer. Risk from install mechanism itself is low.

⚠ Credentials

The declared required credential (DISCORD_BOT_TOKEN) is appropriate. However the script also reads a WORKSPACE environment variable (not declared) to form a path to an .env file in the user's home (~/.openclaw/workspace/.env), which could access other secrets or files. The undocumented file-read fallback is disproportionate and should be disclosed or removed.

✓ Persistence & Privilege

The skill does not request permanent presence (always is false) and does not modify other skills or system-wide settings. No elevated persistence privileges are requested.

版本历史

v1.0.0

- Initial release: Discord Bot API integration for server management, moderation, and automation via Python stdlib (no external dependencies). - Supports managing servers, channels, messages, roles, members, and webhooks. - Includes commands for sending messages, managing roles, moderating users, and handling server settings. - Outputs JSON by default, with optional human-readable formatting. - Requires only the DISCORD_BOT_TOKEN environment variable.

元数据

Slug discord-bot

版本 1.0.0

许可证 —

累计安装 4

当前安装数 4

历史版本数 1

常见问题

Discord Bot 是什么？

Discord Bot API integration — manage servers, channels, messages, roles, members, and webhooks via the Discord REST API. Send messages, manage server setting... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 670 次。

如何安装 Discord Bot？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install discord-bot」即可一键安装，无需额外配置。

Discord Bot 是免费的吗？

是的，Discord Bot 完全免费（开源免费），可自由下载、安装和使用。

Discord Bot 支持哪些平台？

Discord Bot 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Discord Bot？

由 aiwithabidi（@aiwithabidi）开发并维护，当前版本 v1.0.0。

Discord Bot

🤖 Discord Bot

Features

Requirements

Quick Start

Commands

guilds

guild-get

channels

channel-create

channel-update

send

send-embed

messages

message-edit

message-delete

react

members

roles

role-assign

webhooks