Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/daxaur/openpaw/c-messagingnpx skills add daxaur/openpaw --skill c-messaginggit clone --depth 1 https://github.com/daxaur/openpawWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/daxaur/openpaw/c-messaging)<a href="https://agentmods.dev/skills/daxaur/openpaw/c-messaging"><img src="https://agentmods.dev/badge/skills/daxaur/openpaw/c-messaging.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00042 | $0.00558 |
| Opus 5 | $0.00021 | $0.00279 |
| Sonnet 5 | $0.00008 | $0.00112 |
| Haiku 4.5 | $0.00004 | $0.00056 |
Grade A, and why
c-messaging scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
This skill manages messaging via imsg (iMessage/SMS) and wacli (WhatsApp). Check availability with which imsg wacli.
iMessage & SMS — imsg
imsg send "Phone or Email" "Message text" # Send a message
imsg send "+14155551234" "Hello!"
imsg send "[email protected]" "Hey there"
imsg list # List recent conversations
imsg list --limit 10 # Last 10 conversations
imsg read "+14155551234" # Read conversation with contact
imsg read "+14155551234" --limit 20 # Read last 20 messages
imsg unread # Show unread messages
imsg group send "Group Name" "Message" # Send to a group chat
imsg group list # List group chats
imsg contacts # List contacts
WhatsApp — wacli
wacli send "+14155551234" "Message text" # Send a message
wacli send "Contact Name" "Hello!" # Send by name (if in contacts)
wacli list # List recent chats
wacli read "+14155551234" # Read conversation
wacli read "+14155551234" --limit 20
wacli unread # Show unread messages
wacli group list # List WhatsApp groups
wacli group send "Group Name" "Message"
wacli status "Your status text" # Set WhatsApp status
Usage Guidelines
- Use
imsgfor iMessage/SMS to Apple devices or phone numbers. - Use
waclifor WhatsApp contacts. - Phone numbers should include country code (e.g., +1 for US).
- Check
imsg unreadorwacli unreadbefore sending follow-ups. - If a contact name is ambiguous, prefer using the phone number directly.
Notes
imsgrequires macOS and an active iMessage account.waclirequires WhatsApp to be linked — runwacli authto scan QR code on first use.- Both tools operate locally; no cloud API credentials required after initial auth.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 52 lines · 42 tokens per session scan A 13ff1a623921
c-messaging is a skill published in the GitHub repository daxaur/openpaw (167 stars, last pushed 3mo ago), licensed MIT. It adds 42 tokens to every session and 558 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
imsg
Read and send iMessages and SMS from the terminal via the imsg CLI.
wacli
Send WhatsApp messages to other people or search/sync WhatsApp history via the wacli CLI (not for normal user chats).
bots
Use when multi-platform bot automation hub — Telegram, Twitter/X, and WhatsApp bots for automated engagement, content distribution, and revenue generation.
WhatsApp for Datacore
WhatsApp integration — WAHA gateway, message import, and CRM sync.
messaging
Send messages to users via WhatsApp and other connected channels. Use when asked to notify someone, send a message, reply to a contact, message a group, or proactively communicate through WhatsApp. Supports text, images, documents, audio, video, and stickers. Also provides group etiquette for observing group…
texting-messages
Read iMessages — "any new messages from Sam?", "what did Sarah say?", "catch me up on my texts". Resolves contact names to handles and reads conversation history via the readmessages tool.