← 返回 Skills 市场
819
总下载
0
收藏
4
当前安装
16
版本数
在 OpenClaw 中安装
/install openclaw-onebot
功能描述
OneBot 11 channel plugin for QQ messaging (NapCat/go-cqhttp). Native OpenClaw integration with private/group chat, group reactions, block streaming, voice pi...
安全使用建议
This plugin looks coherent for connecting OpenClaw to OneBot/NapCat, but take these precautions before installing: 1) inspect scripts/install.sh, scripts/sync-openclaw-cli.mjs and package.json npm scripts in the repo — they will run arbitrary code when executed; 2) restrict sharedDir to a dedicated, minimal-permission folder (do not point it at your home or sensitive data); 3) verify wsUrl/httpUrl point to a trusted NapCat/go-cqhttp host and use an access token if available; 4) consider running the install inside a container or isolated environment first; 5) prefer installing from the upstream GitHub repo (the README references a GitHub URL) or another trusted source rather than an unknown package archive.
功能分析
Type: OpenClaw Skill
Name: openclaw-onebot
Version: 1.2.12
The provided files (SKILL.md, README.md, and metadata) describe a legitimate OpenClaw channel plugin for OneBot 11 (QQ) integration. The documentation outlines standard installation procedures via npm and shell scripts, configuration for WebSocket/HTTP endpoints, and features like voice processing (SILK/AMR to MP3) and message streaming. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found; the requested permissions and external tool dependencies (ffmpeg, uv) are consistent with the stated purpose of a messaging channel plugin.
能力标签
能力评估
Purpose & Capability
The name/description (OneBot 11 channel plugin for QQ) match the declared requirements: node/npm and the two OpenClaw config paths channels.onebot.wsUrl and channels.onebot.httpUrl. Optional items mentioned in the docs (ffmpeg, pilk/uv) are reasonable for the documented voice pipeline and are not listed as required env secrets.
Instruction Scope
SKILL.md is mostly scoped to building/installing the plugin and updating openclaw.json (setting wsUrl/httpUrl/accessToken/sharedDir). It instructs running local scripts (bash scripts/install.sh, npm scripts, scripts/sync-openclaw-cli.mjs) and OpenClaw CLI commands. Those actions are expected for this plugin, but the docs ask the user/agent to execute repository scripts that can run arbitrary code — the repo's scripts should be inspected/verified before execution.
Install Mechanism
There is no formal install spec in the registry (instruction-only). Installation is via repository-provided bash/npm scripts and openclaw CLI. This avoids remote binary downloads in the skill metadata, but npm/shell scripts in the package will execute on the host if run — review package scripts and install.sh prior to running to avoid unexpected actions.
Credentials
The skill does not request any secrets from the registry metadata; it requires two config paths (wsUrl/httpUrl) appropriate for a OneBot channel. The docs mention an optional ONEBOT_ACCESS_TOKEN (expected). The plugin uses a sharedDir/containerSharedDir to stage media — this gives the plugin/agent access to files in that host path and should be limited to a dedicated directory with minimal permissions.
Persistence & Privilege
always: false and default autonomous invocation are set (normal). The skill will be installed as an OpenClaw plugin via openclaw plugins install and writes plugin entries into OpenClaw-managed config — expected for a channel plugin. It does not request elevated platform privileges in the metadata.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install openclaw-onebot - 安装完成后，直接呼叫该 Skill 的名称或使用
/openclaw-onebot触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.2.12
Document the OpenClaw OneBot security-audit cleanup and current verification flow.
v1.2.11
Refresh OpenClaw OneBot setup guidance and package/plugin compatibility metadata.
v1.2.10
Release 1.2.10: add generic sendMedia outbound support for image, audio, and file delivery across delivery recovery, mirror, and message-tool paths; update the test suite to 116 passing tests; refresh release docs and metadata for the runtime package flow.
v1.2.9
Refresh the published skill for the OpenClaw 2026.4.9 / plugin-sdk 2026.4.9 release, including setupEntry support, release-package install flow, and updated 112-test verification metadata.
v1.2.8
Release 1.2.8: 106 tests passing, coverage verified, and refreshed OneBot channel documentation.
v1.2.7
- Improved channel filtering and allowFrom logic for QQ message routing and authorization.
- Enhanced test coverage of channel actions and filtering behavior.
- Updated dependencies in package.json and package-lock.json.
- Minor code structure and type improvements in channel implementation.
v1.2.6
fix: normalizeTarget should return string, not object — fixes message tool 'to required' error when sending to onebot group targets
v1.2.5
Fix OneBot text command authorization so built-in OpenClaw commands like /status, /help, /commands, /model, /new, and /reset work over QQ. Add regression coverage for command passthrough, allowFrom gating, timeout handling, and e2e message delivery.
v1.2.4
Simplify ClawHub SKILL.md frontmatter and switch to a README-style markdown body for better compatibility with ClawHub rendering and scanning.
v1.2.3
Optimize ClawHub skill formatting for plain markdown rendering and replace wide comparison tables with compact comparison sections.
v1.2.2
Clarify installer requirements, write paths, safety boundaries, user confirmation rules, and source verification steps for ClawHub.
v1.2.1
Expand ClawHub skill overview with feature comparison, OpenClaw config examples, capability boundaries, and verification guidance.
v1.2.0
Add block streaming, group reactions, default automatic group reactions, and refreshed installation guidance.
v1.1.2
- Added comprehensive test suite with 16 new files, including channel, gateway, config, outbound, and runtime tests.
- Added README.md for documentation.
- Added package-lock.json for dependency locking.
- Updated package.json for test and build tooling.
- No functional changes to runtime code; this release enhances testing and developer documentation.
v1.1.1
v1.1.1: Add ClawHub suspicious flag explanation (.ts MIME false positive)
v1.1.0
v1.1.0: Voice pipeline (SILK/AMR → MP3 → STT/TTS auto), message batching (1.5s debounce), 58 tests
元数据
常见问题
OpenClaw OneBot 是什么？
OneBot 11 channel plugin for QQ messaging (NapCat/go-cqhttp). Native OpenClaw integration with private/group chat, group reactions, block streaming, voice pi... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 819 次。
如何安装 OpenClaw OneBot？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-onebot」即可一键安装，无需额外配置。
OpenClaw OneBot 是免费的吗？
是的，OpenClaw OneBot 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
OpenClaw OneBot 支持哪些平台？
OpenClaw OneBot 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 OpenClaw OneBot？
由 Jerry（@xucheng）开发并维护，当前版本 v1.2.12。
推荐 Skills