OneBot Adapter

Connect OpenClaw to OneBot protocol for QQ bot integration. Use when receiving or sending QQ messages via NapCat or other OneBot servers.

This skill implements a OneBot HTTP client and WebSocket listener which matches its description, but there are a few issues to consider before installing or running it: - ONEBOT_TOKEN and endpoint URLs are used by the code and SKILL.md but are not declared in the skill metadata. Treat ONEBOT_TOKEN as sensitive (limit its scope, rotate if needed). Prefer creating a token with minimal permissions. - The package has no install spec: it depends on Python libraries (requests, websockets) and may fail unless you install them yourself. Review and install dependencies in a controlled environment (virtualenv or container). - The scripts' shebang points to /opt/playwright/bin/python, which is nonstandard; run them explicitly with your intended Python interpreter (python3 scripts/onebot_ws_listener.py) to avoid surprises. - Review the included source (onebot_client.py, onebot_ws_listener.py) yourself — they make network connections to the configured endpoints and can send messages (including administrative actions like kicking/banning). Ensure you trust the OneBot server URLs you configure. If you need to proceed: run this skill in an isolated environment (container or VM), provide only a limited-scope token, and install dependencies explicitly. If you want stronger assurance, ask the maintainer to: declare required env vars in metadata, provide a clear install spec, and use a standard shebang or packaging.

Type: OpenClaw Skill Name: onebot-adapter Version: 1.0.0 The skill bundle provides a OneBot adapter for QQ bot integration, consisting of an HTTP client and a WebSocket listener. All code and documentation align with the stated purpose, allowing the agent to send/receive messages and manage groups via the OneBot protocol. Configuration is handled via environment variables or localhost defaults. There is no evidence of data exfiltration, unauthorized command execution, persistence mechanisms, or prompt injection attempts against the OpenClaw agent. The capabilities provided are inherent to a bot's functionality and are not indicative of malicious intent within the skill itself.