Group Activation

ReviewAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill is coherent with its purpose, but it temporarily changes live group-chat behavior and schedules a cleanup job, so owner-only controls should be verified.

Before installing, make sure your OpenClaw group policies really restrict activation to the owner, and monitor any active group participation windows. This skill is not inherently suspicious, but it can make the agent speak in group chats and edit live configuration, so it should be used only with trusted owner controls.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

For the selected group, the agent may respond to group messages without requiring a direct mention during the active window.

Why it was flagged

The skill instructs the agent to modify live gateway configuration based on inbound message metadata. This is purpose-aligned for group activation, but it is a sensitive config mutation.

Skill content
Patch `channels.<platform>.groups.<group_id>.requireMention` to `false` in `openclaw.json`.
Recommendation

Confirm that only the owner can trigger this flow, verify the exact group and duration before opening the gate, and prefer auditable, scoped config updates.

What this means

A scheduled job will act later on the user’s behalf; if it fails or is not tracked correctly, the group gate could remain open longer than intended.

Why it was flagged

The skill schedules an autonomous future action that persists beyond the current interaction. It is bounded and intended to close access, but it still changes config and sends a message later without another prompt.

Skill content
Create a one-shot cron job (`kind: "at"`) for the parsed duration. When it fires: patch `requireMention` back to `true` for this group in `openclaw.json`, then send a brief goodbye to the group.
Recommendation

Keep visible records of active group timers, associate jobs with the specific group ID, enforce reasonable maximum durations, and alert the owner if cleanup fails.