← 返回 Skills 市场
279
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install sms-gateway
功能描述
Send and receive SMS using a local sms-gate.app instance running on Android (via Termux) or a dedicated device. Use when the user needs to send text messages...
安全使用建议
This skill appears to implement a legitimate local SMS gateway client, but be aware of hidden forwarding and local files:
- The webhook receiver (scripts/webhook_server.py) automatically forwards incoming SMS payloads to OPENCLAW_WEBHOOK_URL, which defaults to http://localhost:8080/webhook unless you set OPENCLAW_WEBHOOK_URL='disabled'. SKILL.md does not document this. Before running the webhook server, explicitly set OPENCLAW_WEBHOOK_URL to 'disabled' (or to a URL you trust) if you do not want incoming message content forwarded.
- The skill caches JWT tokens to .token.json in the skill directory and writes ~/.sms_gateway_last_check. These files contain sensitive data (access_token and timestamps). If you install the skill, ensure the skill directory is not world-readable and consider clearing the token file when not needed.
- The skill reads a .env file in its root (auth._load_env). Follow the README guidance to create .env, but be aware credentials in .env are used directly; keep that file private.
- When configuring webhooks via manage_webhooks.py, avoid registering public/unknown endpoints for sms:received unless you trust them, because message bodies can be delivered to those endpoints.
- If you want to proceed: audit or modify scripts/webhook_server.py to change the default OPENCLAW_WEBHOOK_URL to 'disabled' or make forwarding opt-in, and confirm file permissions for .token.json and .env. If you are unsure, run the scripts in a controlled environment (not exposed to the internet) and review outgoing network traffic while testing.
功能分析
Type: OpenClaw Skill
Name: sms-gateway
Version: 1.0.0
The sms-gateway skill provides a standard interface for interacting with a self-hosted Android SMS gateway (sms-gate.app). The bundle includes well-structured Python scripts for sending SMS, checking delivery status, polling for incoming messages, and managing webhooks using standard library components (urllib). Authentication is handled via JWT with local token caching in .token.json, and the instructions in SKILL.md are strictly aligned with the stated functionality without any evidence of prompt injection or malicious intent.
能力评估
Purpose & Capability
Name/description, required binaries (python3), and the included scripts (send, list, status, health, webhook management) are consistent with a local SMS gateway integration. The requested env vars (SMS_GATE_URL, SMS_GATE_USER, SMS_GATE_PASS) are appropriate for this purpose.
Instruction Scope
SKILL.md documents how to run the provided scripts but omits a runtime behavior present in the code: scripts/webhook_server.py will attempt to forward every incoming SMS webhook to an OPENCLAW_WEBHOOK_URL (default http://localhost:8080/webhook) unless that env var is explicitly set to 'disabled'. That forwarding is not documented in SKILL.md and thus is unexpected scope creep — it transmits message payloads to another HTTP endpoint by default.
Install Mechanism
Instruction-only skill with no install spec; included code uses only Python stdlib. No remote downloads, no archive extraction, and no extra packages are pulled in by the skill.
Credentials
Declared env vars (SMS_GATE_URL/USER/PASS) are proportionate. However, the code reads additional environment variables not declared in the manifest/SKILL.md (OPENCLAW_WEBHOOK_URL controls automatic forwarding) and also reads a local .env in the skill root via auth._load_env. The presence of an undeclared forwarding target is the primary proportionality concern because it can cause exfiltration of incoming SMS content to an endpoint the user did not configure in the SKILL.md.
Persistence & Privilege
The skill writes a token cache (.token.json) into the skill root and a last-check state file (~/.sms_gateway_last_check) in the user's home; this is normal for caching but stores sensitive access_token in plaintext JSON. The skill is not always-enabled and does not modify other skills or system-wide settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install sms-gateway - 安装完成后，直接呼叫该 Skill 的名称或使用
/sms-gateway触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of sms-gateway skill:
- Send and receive SMS via a local sms-gate.app instance on Android phone like Google Pixel 3
- Scripts provided for sending SMS, checking delivery status, listing message history, and managing webhooks for incoming SMS and delivery confirmations.
- Requires environment variables for gateway URL, user, and password.
- Detailed setup instructions and common usage patterns included.
- Supports webhook integration for receiving incoming SMS, with guidance for both local and remote setups (e.g., ngrok).
元数据
常见问题
FreeSmsGateway 是什么？
Send and receive SMS using a local sms-gate.app instance running on Android (via Termux) or a dedicated device. Use when the user needs to send text messages... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 279 次。
如何安装 FreeSmsGateway？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install sms-gateway」即可一键安装，无需额外配置。
FreeSmsGateway 是免费的吗？
是的，FreeSmsGateway 完全免费（开源免费），可自由下载、安装和使用。
FreeSmsGateway 支持哪些平台？
FreeSmsGateway 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 FreeSmsGateway？
由 Minde（@minstn）开发并维护，当前版本 v1.0.0。
推荐 Skills