Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add daxaur/openpaw --skill c-messaginggit clone --depth 1 https://github.com/daxaur/openpawWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/daxaur/openpaw/c-messaging)<a href="https://agentmods.dev/skills/daxaur/openpaw/c-messaging"><img src="https://agentmods.dev/badge/skills/daxaur/openpaw/c-messaging/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/daxaur/openpaw/c-messaging"><img src="https://agentmods.dev/badge/skills/daxaur/openpaw/c-messaging.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00042 | $0.00558 |
| Opus 5.5 | $0.00017 | $0.00223 |
| Sonnet 5.5 | $0.00008 | $0.00112 |
| Haiku 4.5 | $0.00004 | $0.00056 |
Grade A, and why
c-messaging scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
This skill manages messaging via imsg (iMessage/SMS) and wacli (WhatsApp). Check availability with which imsg wacli.
iMessage & SMS — imsg
imsg send "Phone or Email" "Message text" # Send a message
imsg send "+14155551234" "Hello!"
imsg send "[email protected]" "Hey there"
imsg list # List recent conversations
imsg list --limit 10 # Last 10 conversations
imsg read "+14155551234" # Read conversation with contact
imsg read "+14155551234" --limit 20 # Read last 20 messages
imsg unread # Show unread messages
imsg group send "Group Name" "Message" # Send to a group chat
imsg group list # List group chats
imsg contacts # List contacts
WhatsApp — wacli
wacli send "+14155551234" "Message text" # Send a message
wacli send "Contact Name" "Hello!" # Send by name (if in contacts)
wacli list # List recent chats
wacli read "+14155551234" # Read conversation
wacli read "+14155551234" --limit 20
wacli unread # Show unread messages
wacli group list # List WhatsApp groups
wacli group send "Group Name" "Message"
wacli status "Your status text" # Set WhatsApp status
Usage Guidelines
- Use
imsgfor iMessage/SMS to Apple devices or phone numbers. - Use
waclifor WhatsApp contacts. - Phone numbers should include country code (e.g., +1 for US).
- Check
imsg unreadorwacli unreadbefore sending follow-ups. - If a contact name is ambiguous, prefer using the phone number directly.
Notes
imsgrequires macOS and an active iMessage account.waclirequires WhatsApp to be linked — runwacli authto scan QR code on first use.- Both tools operate locally; no cloud API credentials required after initial auth.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 52 lines · 42 tokens per session scan A 13ff1a623921
c-messaging is a skill published in the GitHub repository daxaur/openpaw (173 stars, last pushed 5mo ago), licensed MIT. It adds 42 tokens to every session and 558 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
imsg
Read and send iMessages and SMS from the terminal via the imsg CLI.
messaging
Send messages to users via WhatsApp and other connected channels. Use when asked to notify someone, send a message, reply to a contact, message a group, or proactively communicate through WhatsApp. Supports text, images, documents, audio, video, and stickers. Also provides group etiquette for observing group…
imsg
Use imsg to read and send iMessage/SMS via macOS Messages.app.
wacli
Send WhatsApp messages to other people or search/sync WhatsApp history via the wacli CLI (not for normal user chats).
cron-task-creator
A scheduler for recurring octo agent tasks. Each task contains a schedule and a prompt, so octo can run an agent turn automatically at the specified times.
workflow-creator
Turn a repeatable multi-step task into a runnable, reusable saved workflow through guided conversation, in either of two shapes — chaining existing skills/recordings (wiring each one's output into the next's input), or composing the workflow script's own primitives (agent/parallel/pipeline) directly when the task…