Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add hyqibot/token-free-openclaw --skill channel_messagegit clone --depth 1 https://github.com/hyqibot/token-free-openclawWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/hyqibot/token-free-openclaw/channel_message)<a href="https://agentmods.dev/skills/hyqibot/token-free-openclaw/channel_message"><img src="https://agentmods.dev/badge/skills/hyqibot/token-free-openclaw/channel_message/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/hyqibot/token-free-openclaw/channel_message"><img src="https://agentmods.dev/badge/skills/hyqibot/token-free-openclaw/channel_message.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high YARA Match · line 3 YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).Fix: Remove offensive tool references and exploit code. Legitimate agent skills should not contain penetration testing tools, exploit frameworks, or reconnaissance utilities.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00113 | $0.01602 |
| Opus 5 | $0.00056 | $0.00801 |
| Sonnet 5 | $0.00023 | $0.00320 |
| Haiku 4.5 | $0.00011 | $0.00160 |
Grade A, and why
channel_message scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 251 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Channel Message(频道消息推送)
什么时候用
通常只有在用户明确要求向某个 channel / 会话发送消息,或你需要主动推送通知(如任务完成、提醒、告警)时,使用本 skill。
这是单向发送,不会返回回复。
应该使用
- 用户明确要求发往某个 channel / 会话
- 任务完成后主动通知用户
- 定时提醒、告警、状态更新
- 将异步结果推送回某个已有会话
- 用户明确要求"处理完后通知我"
不应使用
- 如果只是当前会话中的正常回复,不要使用
copaw channels send - 需要和用户进行双向对话并立即等待回复
- 还不知道目标 session 是哪个
- 想当然猜测
target-user或target-session
决策规则
- 通常只有在用户明确要求发往某个 channel / 会话,或需要主动通知时才使用
- 发送前必须先查 session
- 不要猜
target-user和target-session - 如果查到多个 session,优先使用最近活跃的
channel send是单向推送,不会返回用户回复
最常用命令
1) 先查询可用 sessions
copaw chats list --agent-id <your_agent> --channel <channel>
也可以按用户筛选:
copaw chats list --agent-id <your_agent> --user-id <user_id>
2) 发送消息
copaw channels send \
--agent-id <your_agent> \
--channel <channel> \
--target-user <user_id> \
--target-session <session_id> \
--text "..."
最小工作流
1. 判断:是否为用户明确要求发送,或是否需要主动通知
2. copaw chats list 查询目标 session
3. 从结果中获取 user_id 和 session_id
4. 若有多个 session,优先选最近活跃的
5. copaw channels send 发送消息
6. 结束(无回复)
关键规则
必填参数
copaw channels send 必须同时提供:
--agent-id--channel--target-user--target-session--text
必须先查询
发送前先执行:
copaw chats list --agent-id <your_agent> --channel <channel>
从结果中获取:
user_id→--target-usersession_id→--target-session
如果有多个候选 session,优先选择 updated_at 最近的会话。
单向推送
copaw channels send 只负责发送,不等待回复。
简短示例
用户明确要求发往某个 channel
copaw chats list --agent-id notify_bot --channel feishu
copaw channels send \
--agent-id notify_bot \
--channel feishu \
--target-user manager_id \
--target-session manager_session \
--text "周报已生成,请查收"
任务完成通知
copaw chats list --agent-id task_bot --channel console
copaw channels send \
--agent-id task_bot \
--channel console \
--target-user alice \
--target-session alice_console_001 \
--text "✅ 任务已完成"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 251 lines · 113 tokens per session scan A 01c2e919c281
channel_message is a skill published in the GitHub repository hyqibot/token-free-openclaw (123 stars, last pushed 19d ago), licensed Apache-2.0. It adds 113 tokens to every session and 1,602 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
tmux
Remote-control tmux sessions for interactive CLIs by sending keystrokes and scraping pane output.
officecli-word-form
Use this skill to create fillable Word forms (.docx) with real Content Controls (SDT) + legacy FormField checkboxes + MERGEFIELD mail-merge placeholders + document protection. Trigger on: 'fillable form', 'form fields', 'content controls', 'SDT', 'word form', 'fill in', 'only editable fields', 'protect document'…
summarize
Summarize or extract text/transcripts from URLs, podcasts, and local files (great fallback for “transcribe this YouTube/video”).
add-matrix
Add Matrix channel integration via Chat SDK. Works with any Matrix homeserver.
add-resend
Add Resend (email) channel integration via Chat SDK.
add-macos-statusbar
Add a macOS menu bar status indicator for NanoClaw. Shows a bolt icon with a green/red dot indicating whether NanoClaw is running, with Start, Stop, and Restart controls. macOS only.