← 返回 Skills 市场
241
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install matrix-openapi-skill
功能描述
Operate Matrix Client-Server API through UXC with a curated OpenAPI schema, bearer-token auth, and homeserver-aware messaging guardrails.
安全使用建议
This skill appears to do what it says (operate Matrix via a curated OpenAPI schema), but the package metadata omits things the runtime explicitly needs. Before installing: (1) verify you have and trust the uxc CLI and ripgrep (rg) on the host, since SKILL.md and scripts expect them; (2) do not supply a high-privilege MATRIX_ACCESS_TOKEN to an untrusted skill — confirm the maintainer and repository; (3) ask the publisher to update registry metadata to declare required binaries (uxc, rg) and required env vars (e.g., MATRIX_ACCESS_TOKEN) so you can review them at install time; (4) be aware the skill can send room messages if given a valid token — ensure you want the agent to have that capability and consider using a token with limited scope or a throwaway/test account. If you want stronger assurance, inspect the included OpenAPI schema and SKILL.md thoroughly or run the skill in an isolated environment/account first.
功能分析
Type: OpenClaw Skill
Name: matrix-openapi-skill
Version: 1.0.0
The skill bundle provides a legitimate interface for interacting with the Matrix Client-Server API using the `uxc` tool. It includes a curated OpenAPI schema (`matrix-client-server.openapi.json`), clear authentication procedures for OAuth and bearer tokens, and sensible guardrails for high-risk operations like sending messages. The instructions in `SKILL.md` and `usage-patterns.md` are consistent with the stated purpose, and the validation script (`scripts/validate.sh`) ensures the integrity of the documentation and configuration.
能力评估
Purpose & Capability
The skill's purpose (Matrix Client-Server API operations) matches the instructions and included OpenAPI schema. However the SKILL.md lists prerequisites (uxc CLI and a Matrix access token) and the validate script requires 'rg' (ripgrep), but the registry metadata declares no required binaries or env vars. Missing these declarations is an incoherence: a Matrix access token and uxc are reasonably required, but they should be declared in the metadata.
Instruction Scope
The SKILL.md instructs the agent to perform auth setup (including setting a secret from env MATRIX_ACCESS_TOKEN), to link a CLI, and to start background /sync subscriptions that write to $HOME/.uxc/subscriptions/*. These actions are within the skill's stated purpose, but the instructions explicitly reference an environment variable (MATRIX_ACCESS_TOKEN) and perform file writes without the registry metadata documenting those requirements — that mismatch expands the effective runtime scope unexpectedly.
Install Mechanism
This is an instruction-only skill with no install spec. Nothing will be downloaded or written by an installer step. The only included script is a validation helper; no remote install URLs are present.
Credentials
The SKILL.md expects a Matrix access token (shown via --secret-env MATRIX_ACCESS_TOKEN) which is the normal credential for this purpose, but the skill metadata lists no required env vars or primary credential. That omission prevents users/administrators from seeing at install-time that a secret will be consumed by the skill. Requesting a homeserver access token is proportionate to the purpose, but the metadata should declare it.
Persistence & Privilege
The skill is not force-included (always: false) and does not request any special platform privileges. It can be invoked autonomously by the agent (default), which is normal for skills; combined with the undisclosed access token requirement this is a moderate operational consideration but not by itself a privilege escalation.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install matrix-openapi-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/matrix-openapi-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
matrix-openapi-skill 1.0.0
- Initial release of the Matrix Client-Server API skill for UXC.
- Supports key Matrix operations: token owner lookup, joined rooms, room state, sync polling, user profile/presence, and room messaging.
- Configurable for any homeserver with bearer-token authentication.
- Provides guardrails for safe message sends and polling workflows.
- Includes detailed setup and CLI usage instructions for integration with UXC.
元数据
常见问题
Matrix OpenAPI Skill 是什么？
Operate Matrix Client-Server API through UXC with a curated OpenAPI schema, bearer-token auth, and homeserver-aware messaging guardrails. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 241 次。
如何安装 Matrix OpenAPI Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install matrix-openapi-skill」即可一键安装，无需额外配置。
Matrix OpenAPI Skill 是免费的吗？
是的，Matrix OpenAPI Skill 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Matrix OpenAPI Skill 支持哪些平台？
Matrix OpenAPI Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Matrix OpenAPI Skill？
由 jolestar（@jolestar）开发并维护，当前版本 v1.0.0。
推荐 Skills