Notify with Pushover

Send push notifications to your phone via Pushover (pushover.net). Use when you want reliable out-of-band alerts from OpenClaw: reminders, monitoring alerts, cron/heartbeat summaries, or 'notify me when X happens' workflows.

Security Scan

The skill appears to do what it claims (send Pushover notifications), but its declared metadata omits the credentials it actually requires and the primary credential — this mismatch is a concern and should be clarified before installation.

Purpose & Capability

The code and SKILL.md implement a simple Pushover notifier (posting only to https://api.pushover.net/1/messages.json), which matches the skill's description. However, the registry metadata lists no required environment variables or primary credential, while the runtime clearly needs PUSHOVER_APP_TOKEN and PUSHOVER_USER_KEY (and accepts aliases PUSHOVER_TOKEN / PUSHOVER_USER). The missing metadata is an inconsistency.

Instruction Scope

SKILL.md and the included script limit actions to building a POST to the official Pushover API and printing the response. There are no instructions to read unrelated files, harvest system state, or send data to other endpoints.

Install Mechanism

There is no install spec (instruction-only skill) and the bundled JS is run directly with node. No downloads, archives, or external install steps are present.

Credentials

The runtime requires sensitive values (PUSHOVER_APP_TOKEN and PUSHOVER_USER_KEY) but the skill metadata does not declare them or indicate a primary credential. This metadata omission increases the chance a user will accidentally provide credentials in the wrong place or to the wrong skill. The script also accepts alternate env names (--token/--user), which is flexible but should be documented in metadata.

Persistence & Privilege

The skill does not request persistent presence (always is false), does not modify other skills or system-wide settings, and does not appear to store credentials on disk. Autonomous invocation (disable-model-invocation=false) is normal and not by itself a problem.

What to consider before installing

This skill's behavior is straightforward: it posts messages to the official Pushover API and prints the response. However, the registry metadata omitted required environment variables (PUSHOVER_APP_TOKEN and PUSHOVER_USER_KEY) and a primary credential declaration — which is likely a metadata oversight but should be fixed. Before installing: (1) confirm you are comfortable providing your Pushover app token and user key to this skill and that you will supply them securely at runtime (do not hardcode into files in a shared repo); (2) review scripts/pushover_send.js yourself (it is short and readable) to verify it only posts to api.pushover.net; (3) prefer scoping the credential to this skill and avoid giving it broader secrets access; and (4) if you need stronger assurance, ask the publisher to update registry metadata to list required env vars and identify the primary credential. If you can't verify the owner or metadata, treat the missing-declaration as a red flag and avoid providing credentials until clarified.

Pushover Notify

Send push notifications through the Pushover API using a small Node script.

Setup (one-time)

1. Create a Pushover application token and get your user key:

• App token: https://pushover.net/apps/build
• User key: shown on your Pushover dashboard

2. Provide credentials to the runtime (do not hardcode into this skill):

• PUSHOVER_APP_TOKEN
• PUSHOVER_USER_KEY

3. (Optional) set defaults:

• PUSHOVER_DEVICE (device name)
• PUSHOVER_SOUND

Send a notification

Use the bundled script:

PUSHOVER_APP_TOKEN=... PUSHOVER_USER_KEY=... \
  node skills/pushover-notify/scripts/pushover_send.js \
  --title "OpenClaw" \
  --message "Hello from Ted" \
  --priority 0

Optional fields:

• --url "https://..." and --url-title "Open"
• --sound "pushover"
• --device "iphone"
• --priority -1|0|1|2

Emergency priority example:

PUSHOVER_APP_TOKEN=... PUSHOVER_USER_KEY=... \
  node skills/pushover-notify/scripts/pushover_send.js \
  --title "ALERT" \
  --message "Something is on fire" \
  --priority 2 --retry 60 --expire 3600

Notes

• If you need API field details, read: references/pushover-api.md.
• For recurring alerts, prefer cron to schedule reminders; the cron job text can instruct Ted to run this skill.