ClawHub

WhatsApp Labels

v1.0.0

List and search WhatsApp Business labels/tags

⭐ 0· 479·0 current·0 all-time
byMarcos Santos@marcosrippel
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The name/description (list and search WhatsApp Business labels) matches the included code which reads label and contact cache files. Minor wording mismatch: SKILL.md says 'Manage' but the script is read-only (list/search) and does not modify labels.
✓
Instruction Scope
SKILL.md directs the agent to run the included Node script; the script only reads local files (store.json, labels.json, contacts.json) under a specific OpenClaw state path and prints JSON results. It does not run network requests or access other system paths.
✓
Install Mechanism
No install spec is provided (instruction-only with a bundled script). Nothing is downloaded or written by an installer; risk from install mechanism is minimal.
ℹ
Credentials
The skill does not require declared env vars, but the script will honor OPENCLAW_STATE_DIR if present and otherwise reads ~/.openclaw/credentials/whatsapp/default. Reading those files is proportionate to listing/searching labels, but those files can contain PII or session data — users should be aware the agent will access local WhatsApp cache/contact data.
✓
Persistence & Privilege
The skill is not always-enabled and uses default autonomous invocation settings. It does not modify other skills, install services, or persist changes; requested privileges are minimal.
Assessment
This skill is coherent with its purpose: it runs a bundled Node script that reads WhatsApp cache files from OPENCLAW_STATE_DIR or ~/.openclaw/credentials/whatsapp/default and outputs labels or chats matching a label. Before installing, verify you are comfortable allowing the agent to read those local files (they may include contact names and labels). Note the script is read-only — it does not modify WhatsApp data or call external services — and it does not request any additional credentials. If you do not want the agent to access your WhatsApp cache, do not install or run this skill. If you need write/manage capabilities, this skill does not provide them; inspect or test the script locally to confirm behavior.

Like a lobster shell, security has layers — review code before you run it.

baileysvk97ffvs7wp5gb4x2fr0gr1pqh581fxvcbusinessvk97ffvs7wp5gb4x2fr0gr1pqh581fxvclabelsvk97ffvs7wp5gb4x2fr0gr1pqh581fxvclatestvk97ffvs7wp5gb4x2fr0gr1pqh581fxvcofflinevk97ffvs7wp5gb4x2fr0gr1pqh581fxvctagsvk97ffvs7wp5gb4x2fr0gr1pqh581fxvcwhatsappvk97ffvs7wp5gb4x2fr0gr1pqh581fxvc

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments