← 返回 Skills 市场
Qmsg Push
作者
TimeThreeSecond
· GitHub ↗
· v0.1.0
· MIT-0
74
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install qmsg-push-skills
功能描述
Qmsg 酱推送，通过 QQ 主动发送消息通知，无需 API Key
安全使用建议
Do not install blindly. The skill actually requires a Qmsg KEY (contradicting the 'no API Key' description) and expects a secrets.json but the path is ambiguous: SKILL.md says ~/.workbuddy/secrets.json while the script reads secrets.json from its own directory. Before installing, verify where you'll store the key, confirm the script's path and behavior, and ensure you trust qmsg.zendee.cn because the key and message content will be sent to that external service. If you proceed, either (a) update the script to read the secret from a secure, declared location (or an explicitly declared env var), or (b) place the secrets.json only in a secure folder you control. If anything about the secret handling remains unclear, treat this skill as untrusted.
功能分析
Type: OpenClaw Skill
Name: qmsg-push-skills
Version: 0.1.0
The skill is a legitimate implementation for sending QQ notifications via the Qmsg service (qmsg.zendee.cn). The Python script `qmsg_push.py` reads a local API key from a JSON file and sends messages using the requests library as described in the documentation. No evidence of data exfiltration to unauthorized endpoints, malicious execution, or prompt injection was found.
能力标签
能力评估
Purpose & Capability
The skill's declared purpose (push messages via qmsg.zendee.cn) matches the included script which calls that service. However the README/SKILL.md claim '无需 API Key' while both the README and script require a Qmsg KEY — this contradiction is significant.
Instruction Scope
SKILL.md and README instruct the agent to read a secrets file (~/.workbuddy/secrets.json) and the script reads a secrets.json file, but the script looks for secrets.json in its own directory (path mismatch). The skill also tells an agent to 'create temporary agent' and read local secret files — reading local secrets is within the feature's scope but the undocumented/ambiguous path and the SKILL.md/registry not declaring the config path is a scope-management problem.
Install Mechanism
Instruction-only skill with a small Python script included and no install spec; nothing is downloaded or written by an installer. Low install risk.
Credentials
Registry metadata declares no required env vars/config paths/primary credential, yet the README and code require a Qmsg KEY stored in a secrets.json file. The skill fails to declare its required secret and contradicts its 'no API Key' claim — this is disproportionate and confusing for users.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills. Normal agent invocation is allowed (default).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install qmsg-push-skills - 安装完成后，直接呼叫该 Skill 的名称或使用
/qmsg-push-skills触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
- Initial release of qmsg-push skill.
- Supports sending push notifications to QQ via Qmsg 酱 without requiring an API Key.
- Provides setup instructions and usage workflow for integration with Workbuddy automation.
元数据
常见问题
Qmsg Push 是什么？
Qmsg 酱推送，通过 QQ 主动发送消息通知，无需 API Key. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 74 次。
如何安装 Qmsg Push？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install qmsg-push-skills」即可一键安装，无需额外配置。
Qmsg Push 是免费的吗？
是的，Qmsg Push 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Qmsg Push 支持哪些平台？
Qmsg Push 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Qmsg Push？
由 TimeThreeSecond（@timethreesecond）开发并维护，当前版本 v0.1.0。
推荐 Skills