Matrix Channel Fix

PassAudited by ClawScan on May 10, 2026.

Overview

This is a coherent Matrix troubleshooting guide, but it includes powerful manual commands that can reset local Matrix state, install a package, restart OpenClaw, and use Matrix credentials.

Install/use this skill only if you are comfortable manually running Matrix/OpenClaw maintenance commands. Before running the reset or room-leave steps, confirm paths, homeserver, account, and room IDs, and consider backing up local Matrix state. Use a dedicated Matrix bot account rather than a personal account.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running this may remove stored Matrix login/session state and require re-login or reconfiguration.

Why it was flagged

This is a destructive shell command that deletes local Matrix account/session files. It is disclosed and tied to token reset, but users should understand the local state loss before running it.

Skill content
rm -rf ~/.openclaw/matrix/accounts/*
Recommendation

Back up or inspect `~/.openclaw/matrix/accounts/` first, confirm the path is correct, and run the command manually only when you intentionally want to reset Matrix account state.

What this means

A Matrix password or access token may be stored or used locally, giving OpenClaw access to that Matrix bot account.

Why it was flagged

The guide asks for Matrix account credentials as part of reconfiguring the Matrix channel. This is expected for the integration, but it means the skill handles account access.

Skill content
openclaw config set channels.matrix.password "YOUR_PASSWORD"
Recommendation

Use a dedicated Matrix bot account with limited room access, avoid pasting real credentials into shared logs or chats, and rotate credentials if they may have been exposed.

What this means

Running this can modify the installed OpenClaw environment and introduce or update package code.

Why it was flagged

The guide installs an unpinned npm package into the global OpenClaw installation to fix Matrix encryption support. This is relevant to the stated purpose, but it changes the local runtime and depends on package registry provenance.

Skill content
cd /usr/local/lib/node_modules/openclaw
pnpm add @matrix-org/matrix-sdk-crypto-nodejs
pnpm rebuild @matrix-org/matrix-sdk-crypto-nodejs
Recommendation

Verify the package name and version, prefer pinned versions or official OpenClaw installation guidance when available, and run package changes in a controlled environment.

What this means

If used with the wrong room IDs or account, the bot may leave Matrix rooms unexpectedly.

Why it was flagged

The guide includes raw Matrix API commands that can make the bot leave rooms. This is disclosed and user-directed, but it mutates account membership.

Skill content
for room in "ROOM_ID_1" "ROOM_ID_2"; do
  curl -s -X POST "https://YOUR_HOMESERVER:PORT/_matrix/client/r0/rooms/$room/leave"
Recommendation

List and verify room IDs first, test on one room before bulk actions, and ensure you are using the intended bot account and homeserver.