← 返回 Skills 市场
475
总下载
0
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install skill-agent-broadcast
功能描述
Broadcast a message to multiple OpenClaw group sessions simultaneously. Use for cross-agent coordination, alerts, and announcements.
安全使用建议
This skill appears coherent with its stated purpose. Before installing, confirm you trust the local OpenClaw gateway that the script will POST to (localhost:OPENCLAW_PORT) and ensure any OPENCLAW_TOKEN you set is for that gateway only. Review config/groups.json to avoid accidentally broadcasting to real chat groups you don't intend. Note the registry metadata doesn't mark OPENCLAW_TOKEN as required even though the script supports it — the token is optional but if present will be sent as a Bearer token to the local gateway. If the script were modified to target non-local hosts (not localhost) or to fetch code at install time, treat that as suspicious and do not install without deeper review.
功能分析
Type: OpenClaw Skill
Name: skill-agent-broadcast
Version: 1.0.1
The skill is classified as suspicious due to a potential arbitrary file read vulnerability in `scripts/broadcast.js`. The `GROUPS_CONFIG_PATH` environment variable, if controlled by an attacker, could be used to make the skill attempt to read any file on the system and parse it as JSON. While the script does not exfiltrate the content of arbitrary files or execute them, this capability represents a risky information disclosure vector. No other clear evidence of malicious intent, such as data exfiltration, persistence, or prompt injection against the agent, was found.
能力评估
Purpose & Capability
Name/description (broadcast to OpenClaw groups) matches the included files: a node script that reads a groups registry and POSTs messages to a local gateway (/api/send). Required binary 'node' is appropriate. The presence of config/groups.json with chat IDs is consistent with the stated purpose.
Instruction Scope
SKILL.md instructs running scripts/broadcast.js and documents env vars and config path that the script actually uses. The runtime instructions do not ask the agent to read unrelated files or transmit data to external endpoints — requests are targeted to localhost gateway. The script only reads the groups registry and optional OPENCLAW_TOKEN.
Install Mechanism
There is no external install step or remote download; this is an instruction-only skill with bundled scripts. No archive/extract or third-party package fetches are present, so installation risk is low.
Credentials
Registry metadata lists no required env vars, while SKILL.md documents OPENCLAW_PORT, OPENCLAW_TOKEN (optional), and GROUPS_CONFIG_PATH. The script treats OPENCLAW_TOKEN as optional (defaults to empty) and only sends an Authorization header if a token is set. This is reasonable but the registry/metadata mismatch is worth noting so users know the token is optional but relevant.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills. It relies on a local gateway and local config only.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install skill-agent-broadcast - 安装完成后,直接呼叫该 Skill 的名称或使用
/skill-agent-broadcast触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Removed the internal documentation file config/internal.md.
- No functional or user-facing changes.
v1.0.0
Initial release of skill-agent-broadcast.
- Enables broadcasting a single message to multiple OpenClaw Telegram or Discord groups at once.
- Supports specifying groups by name or raw chat ID, or broadcasting to all registered groups.
- Allows setting a custom delay between sends for rate limiting.
- Configurable via environment variables and an editable group registry JSON file.
- Provides per-group delivery receipts and a summary report of broadcast results.
元数据
常见问题
Skill Agent Broadcast 是什么?
Broadcast a message to multiple OpenClaw group sessions simultaneously. Use for cross-agent coordination, alerts, and announcements. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 475 次。
如何安装 Skill Agent Broadcast?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skill-agent-broadcast」即可一键安装,无需额外配置。
Skill Agent Broadcast 是免费的吗?
是的,Skill Agent Broadcast 完全免费(开源免费),可自由下载、安装和使用。
Skill Agent Broadcast 支持哪些平台?
Skill Agent Broadcast 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Skill Agent Broadcast?
由 Zero2Ai(@zero2ai-hub)开发并维护,当前版本 v1.0.1。
推荐 Skills