What's app
v1.0.0Send WhatsApp messages to other people or search/sync WhatsApp history via the wacli CLI (not for normal user chats).
⭐ 5· 2.6k·10 current·11 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description match what the SKILL.md instructs: it requires the wacli binary and provides commands for auth, sync, search, backfill, and send. No unrelated binaries, environment variables, or services are requested.
Instruction Scope
Instructions stay within the WhatsApp messaging/search/sync domain and require explicit recipient+message confirmation before sending. They do reference local state (~/.wacli), QR-based auth, continuous sync (--follow), and history backfill, which are expected for this functionality but are privacy-sensitive because they access message history and stored credentials.
Install Mechanism
Install options are a Homebrew formula (steipete/tap/wacli) and a Go module (github.com/steipete/wacli/cmd/wacli). These are standard public install methods; no arbitrary archive downloads or unknown shortlinks are used. Verify the upstream tap/repo if you want extra assurance.
Credentials
The skill declares no environment variables or unrelated credentials. It does use a local store (~/.wacli) for auth data (QR login), which is proportionate to operating a WhatsApp CLI but should be considered sensitive.
Persistence & Privilege
The skill is not always-enabled and doesn't request elevated system-wide privileges. The SKILL.md mentions running a continuous sync (wacli sync --follow) which can run persistently, but that is a capability of the CLI itself rather than an automatic, always-on property of the skill.
Assessment
This skill is coherent with its stated purpose, but it will access your WhatsApp account and local store (~/.wacli) and can sync message history. Before installing: (1) confirm you trust the upstream project (steipete/wacli) and the Homebrew tap or Go module source, (2) be aware QR auth will link this machine to your WhatsApp account and stored credentials are sensitive, (3) only use the skill when you explicitly ask the agent to message or search other people (the SKILL.md enforces confirmation), and (4) if you need stronger assurance, inspect the Homebrew formula or Go module source code before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk97069kwcmstb9nrg0n16ndcyh7zya1e
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📱 Clawdis
Binswacli
Install
Install wacli (brew)
Bins: wacli
brew install steipete/tap/wacliInstall wacli (go)
Bins: wacli
go install github.com/steipete/wacli/cmd/wacli@latest