← 返回 Skills 市场
Dooray Hook
作者
Kirin Choi
· GitHub ↗
· v0.1.1
997
总下载
2
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install openclaw-dooray-hook-skill
功能描述
Send automated notifications to Dooray! messenger channels via webhooks.
安全使用建议
This skill appears to do exactly what it claims: read Dooray webhook URLs from your ~/.openclaw/openclaw.json and POST messages to them. Before installing, ensure: (1) The webhook URLs in your OpenClaw config are stored securely (restrict file permissions, do not commit them to version control). (2) You understand that setting verify_ssl: false disables TLS certificate checks — avoid this unless you trust the network/proxy. (3) The agent may be allowed to call the skill autonomously by default; if you want to prevent automated outbound messages, restrict agent permissions or invocation. If you prefer not to store secrets in a global JSON file, consider keeping webhooks in a more secure secret store or environment mechanism and adapting the script accordingly.
功能分析
Type: OpenClaw Skill
Name: openclaw-dooray-hook-skill
Version: 0.1.1
The skill is classified as suspicious due to the explicit option to disable SSL certificate verification (`verify_ssl: false`) in `scripts/send_dooray.py`. While this feature is configurable by the user, defaults to secure, and is documented as a troubleshooting step for specific environments (e.g., corporate proxies, self-signed certificates), it introduces a potential Man-in-the-Middle (MITM) vulnerability if enabled in an untrusted network. There is no evidence of malicious intent, data exfiltration, or other harmful activities; the risk lies in this configurable insecure network communication option.
能力评估
Purpose & Capability
The skill's name/description match its behavior: it sends POSTs to Dooray webhook URLs. Declared requirement (python3) and the required config path (skills.entries.dooray-hook.config in ~/.openclaw/openclaw.json) are appropriate and necessary for the stated function. No unrelated credentials or binaries are requested.
Instruction Scope
SKILL.md and the script limit activity to reading the OpenClaw config and POSTing JSON to Dooray webhook URLs. Minor note: the skill supports an opt-in 'verify_ssl: false' config which disables certificate verification — this is documented and opt-in but weakens TLS guarantees if used.
Install Mechanism
Instruction-only skill with an included Python script; there is no install/download step, no external packages, and nothing written to disk by an installer.
Credentials
No environment variables or external credentials are requested. The single required config path is proportional (it must read stored webhook URLs). The SKILL.md correctly warns that webhook URLs are secrets and should be protected in the local config file.
Persistence & Privilege
The skill does not request 'always' presence and does not modify other skills or system-wide settings. disable-model-invocation is false (normal), so the agent could invoke the skill autonomously — this is the platform default and not combined with other red flags here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install openclaw-dooray-hook-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/openclaw-dooray-hook-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.1
Version 0.1.1
- Added optional config entry verify_ssl to allow disabling SSL certificate verification (default: true).
- Updated SKILL.md with enhanced security notes and details about the verify_ssl option.
- Clarified configuration instructions and parameters in SKILL.md.
- Improved troubleshooting guidance for SSL and config issues.
v0.1.0
Initial release – integrates Dooray! messenger with OpenClaw.
- Send automated notifications and status updates to Dooray! chat rooms via Incoming Webhooks.
- Supports multiple chat rooms and customizable bot profiles through global config.
- Zero external dependencies—uses only built-in Python modules.
- Allows sending messages via both natural language commands and CLI execution.
- Troubleshooting guidance included for setup and usage issues.
元数据
常见问题
Dooray Hook 是什么？
Send automated notifications to Dooray! messenger channels via webhooks. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 997 次。
如何安装 Dooray Hook？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-dooray-hook-skill」即可一键安装，无需额外配置。
Dooray Hook 是免费的吗？
是的，Dooray Hook 完全免费（开源免费），可自由下载、安装和使用。
Dooray Hook 支持哪些平台？
Dooray Hook 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Dooray Hook？
由 Kirin Choi（@iizs）开发并维护，当前版本 v0.1.1。
推荐 Skills