← 返回 Skills 市场
jolestar

LINE OpenAPI Skill

作者 jolestar · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
206
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install line-openapi-skill
功能描述
Operate LINE Messaging API through UXC with a curated OpenAPI schema, bearer-token auth, and messaging-core guardrails.
使用说明 (SKILL.md)

LINE Messaging API Skill

Use this skill to run LINE Messaging API operations through uxc + OpenAPI.

Reuse the uxc skill for shared execution, auth, and error-handling guidance.

Prerequisites

  • uxc is installed and available in PATH.
  • Network access to https://api.line.me.
  • Access to the curated OpenAPI schema URL:
    • https://raw.githubusercontent.com/holon-run/uxc/main/skills/line-openapi-skill/references/line-messaging.openapi.json
  • A LINE Messaging API channel access token.

Scope

This skill covers a Messaging Core surface:

  • bot identity lookup
  • user profile lookup
  • push and reply message sends
  • quota and quota consumption reads
  • webhook endpoint get/set/test operations

This skill does not cover:

  • inbound webhook receiver runtime
  • media/content download flows on api-data.line.me
  • audience, narrowcast, rich menu, or account-management surfaces
  • the full LINE Messaging API

Authentication

LINE Messaging API uses Authorization: Bearer \x3Cchannel access token>.

Configure one bearer credential and bind it to api.line.me:

uxc auth credential set line-channel \
  --auth-type bearer \
  --secret-env LINE_CHANNEL_ACCESS_TOKEN

uxc auth binding add \
  --id line-channel \
  --host api.line.me \
  --scheme https \
  --credential line-channel \
  --priority 100

Validate the active mapping when auth looks wrong:

uxc auth binding match https://api.line.me

Core Workflow

  1. Use the fixed link command by default:

    • command -v line-openapi-cli
    • If missing, create it: uxc link line-openapi-cli https://api.line.me --schema-url https://raw.githubusercontent.com/holon-run/uxc/main/skills/line-openapi-skill/references/line-messaging.openapi.json
    • line-openapi-cli -h
  2. Inspect operation schema first:

    • line-openapi-cli get:/v2/bot/info -h
    • line-openapi-cli get:/v2/bot/profile/{userId} -h
    • line-openapi-cli post:/v2/bot/message/push -h
  3. Prefer read/setup validation before writes:

    • line-openapi-cli get:/v2/bot/info
    • line-openapi-cli get:/v2/bot/message/quota
    • line-openapi-cli get:/v2/bot/channel/webhook/endpoint
  4. Execute with key/value or positional JSON:

    • key/value: line-openapi-cli get:/v2/bot/profile/{userId} userId=U1234567890abcdef
    • positional JSON: line-openapi-cli post:/v2/bot/message/push '{"to":"U1234567890abcdef","messages":[{"type":"text","text":"Hello from UXC"}]}'

Operation Groups

Read / Lookup

  • get:/v2/bot/info
  • get:/v2/bot/profile/{userId}
  • get:/v2/bot/message/quota
  • get:/v2/bot/message/quota/consumption
  • get:/v2/bot/channel/webhook/endpoint

Messaging

  • post:/v2/bot/message/push
  • post:/v2/bot/message/reply

Webhook Endpoint Management

  • put:/v2/bot/channel/webhook/endpoint
  • post:/v2/bot/channel/webhook/test

Guardrails

  • Keep automation on the JSON output envelope; do not use --text.
  • Parse stable fields first: ok, kind, protocol, data, error.
  • Use a channel access token with the scopes required by the target bot/channel configuration.
  • post:/v2/bot/message/push and post:/v2/bot/message/reply are write/high-risk operations; require explicit user confirmation before execution.
  • replyToken values are short-lived and webhook-derived. Use post:/v2/bot/message/reply only when the caller already has a valid token from a recent event.
  • Webhook endpoint get/set/test calls configure delivery only; they do not provide a receiver runtime in uxc.
  • This v1 skill stays on https://api.line.me; content retrieval endpoints on https://api-data.line.me are intentionally out of scope.
  • line-openapi-cli \x3Coperation> ... is equivalent to uxc https://api.line.me --schema-url \x3Cline_openapi_schema> \x3Coperation> ....

References

安全使用建议
This skill is coherent with its stated LINE Messaging API purpose, but before installing or supplying secrets you should: (1) confirm you are comfortable providing a LINE channel access token — the SKILL.md expects one (LINE_CHANNEL_ACCESS_TOKEN) even though the registry metadata omitted it; (2) prefer creating a scoped/limited channel token for this skill and avoid using long-lived/fuller-permission tokens; (3) review the included references/line-messaging.openapi.json to ensure no unexpected endpoints are present; (4) verify you have a trusted 'uxc' binary on PATH before running commands; (5) run the provided scripts/validate.sh locally (it requires ripgrep 'rg' and 'jq') to validate file coherence; (6) do not paste your token into chat messages — configure it in your environment or secret manager as the SKILL.md shows; and (7) request the publisher to update the skill metadata to declare the required env var/primary credential so the manifest and runtime instructions match.
功能分析
Type: OpenClaw Skill Name: line-openapi-skill Version: 1.0.0 The skill is a well-structured wrapper for the LINE Messaging API using the `uxc` utility. It includes a curated OpenAPI schema, clear authentication instructions using environment variables, and explicit guardrails requiring user confirmation for high-risk write operations like sending messages. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found across the documentation, validation scripts, or configuration files.
能力评估
Purpose & Capability
Name, description, included OpenAPI schema, and SKILL.md all consistently target the LINE Messaging API core surfaces (bot info, profile, push/reply messages, webhook endpoint management) and use 'uxc' as the execution layer. The only minor incoherence is that the SKILL.md expects a channel access token but the registry metadata lists no required env vars.
Instruction Scope
SKILL.md gives narrow, concrete runtime instructions: require 'uxc' on PATH, network access to https://api.line.me and the schema URL, link a fixed CLI, inspect operation schema, and prefer read/validate before write operations. It includes explicit guardrails (require user confirmation for writes, replyToken rules) and does not instruct reading unrelated files or transmitting data to unexpected endpoints.
Install Mechanism
This is instruction-only (no install spec), so nothing arbitrary is downloaded or installed by default. The included schema is local and the SKILL.md references a raw.githubusercontent.com URL (a known host) if users want the hosted copy. The validation script requires 'rg' and 'jq' but those are only used for local validation and not automatically installed.
Credentials
Operational instructions explicitly show configuring a bearer credential that uses the environment variable LINE_CHANNEL_ACCESS_TOKEN, but the skill's registry metadata lists no required env vars or primary credential. That mismatch is an incoherence: the skill will need a secret (LINE channel access token) to operate, yet the manifest doesn't declare it. No other unrelated credentials are requested.
Persistence & Privilege
The skill is not 'always' enabled and is user-invocable; model invocation is allowed (the platform default). It does not request system-wide configuration changes, nor does it persist credentials beyond the standard 'uxc auth' binding pattern described in the README.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install line-openapi-skill
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /line-openapi-skill 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release of the line-openapi-skill (v1.0.0). - Enables LINE Messaging API operations via uxc and curated OpenAPI schema. - Supports bot and user profile lookup, message send, quota reads, and webhook endpoint management. - Requires bearer-token authentication and uxc credential binding to api.line.me. - Includes strict guardrails around high-risk message operations and JSON output parsing. - Excludes webhook receiver runtime, media downloads, and non-messaging-core API surfaces.
元数据
Slug line-openapi-skill
版本 1.0.0
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 1
常见问题

LINE OpenAPI Skill 是什么?

Operate LINE Messaging API through UXC with a curated OpenAPI schema, bearer-token auth, and messaging-core guardrails. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 206 次。

如何安装 LINE OpenAPI Skill?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install line-openapi-skill」即可一键安装,无需额外配置。

LINE OpenAPI Skill 是免费的吗?

是的,LINE OpenAPI Skill 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

LINE OpenAPI Skill 支持哪些平台?

LINE OpenAPI Skill 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 LINE OpenAPI Skill?

由 jolestar(@jolestar)开发并维护,当前版本 v1.0.0。

💬 留言讨论