LINE Rich Messages

Comprehensive guide for LINE Rich UI features (Flex Messages, buttons, quick replies, and markdown auto-conversion). Use this skill to provide a professional...

Security Scan

This is an instruction-only LINE UI documentation skill that is largely coherent with its purpose, but there are inconsistent claims about a file-delivery workflow and a missing reference file which should be clarified before installation.

Purpose & Capability

The name/description (LINE Rich Messages) matches the content: templates, directives, and raw JSON for LINE Flex messages. However, README and some references mention a 'File Delivery SOP' / Google Drive workflow and list references/file-delivery.md, while SKILL.md explicitly states 'No file delivery' and that file delivery content was removed — a clear inconsistency between files and the stated scope.

Instruction Scope

SKILL.md stays within documentation: it instructs how to construct Flex JSON and use directive tags, warns against embedding credentials or making unsolicited network calls, and defers actual sending to the LINE plugin. A minor scope issue: directives.md lists unusual items such as 'Device Control' and 'Apple TV' tags which are atypical for a messaging/template guide — they may be harmless placeholders but should be validated against the actual LINE plugin capabilities.

Install Mechanism

No install spec and no code files — instruction-only content. This is low-risk: nothing will be downloaded or written by an installer.

Credentials

The skill requires no environment variables, no credentials, and does not embed tokens. The metadata requests the 'line' plugin, which is appropriate for the stated purpose.

Persistence & Privilege

always is false, no special privileges requested, and the skill does not request modifying other skills or system-wide settings. Autonomous invocation is allowed by default but not combined with other concerning privileges.

Scan Findings in Context

[no_code_files_to_scan] expected: The regex scanner had nothing to analyze because this is an instruction-only skill (no code files).

What to consider before installing

This skill is mostly documentation and templates for building LINE Flex/UIs and does not request credentials or install code — that's good. Before installing: 1) Ask the skill author to reconcile the README references to a 'File Delivery SOP' / Google Drive workflow and the missing references/file-delivery.md with SKILL.md's statement that file delivery was removed. 2) Confirm whether the listed directive types (e.g., device control, Apple TV) are actually supported by your LINE plugin or are only placeholders. 3) If you plan to enable inline button capabilities, test these templates in a staging account (not production) to verify rendering and copy/paste behavior. 4) Because the skill can be invoked by an agent, avoid enabling it globally for sensitive agents until you’ve validated its behavior. If the author cannot explain the file-delivery discrepancy, treat the README claims as stale/outdated and proceed cautiously.

This skill transforms the agent from a text-only bot into a professional LINE assistant with native UI capabilities.

Core Principle: Rich-UI 優先 (Low-Friction)

Typing on mobile is slow and error-prone. Always prioritize Rich UI elements to minimize the user's need to reply with text.

Quick Navigation

Detailed guides for each feature:

1. decision-matrix.md: Choose the best UI element for your scenario.
2. directives.md: Syntax for interactive cards and bubbles.
3. flex-templates.md: Raw JSON Templates for 100% reliable UI creation.
4. markdown-to-flex.md: Auto-美化 tables and code blocks.

<!-- file delivery removed for security -->

Best Practices

• No file delivery: For security, this skill intentionally does not include any workflow for uploading/sharing files (e.g., Google Drive). If you need file delivery, implement it in a separate, tightly-scoped skill with explicit allowlists and safeguards.
• Guided Choices: If you ask a question with 2-4 fixed answers, always include [[quick_replies: ...]].
• Structured Data: Use Markdown tables for any multi-point information (e.g., flight times, order items).
• Destructive Actions: Use [[confirm: ...]] for actions like "Delete Memory" or "Cancel Project".
• UX Limitation (Crucial): Text within Flex Messages (including Markdown tables and auto-converted replies) cannot be selected or copied by the user.
  • Rule: If the data is meant to be copied (e.g., SSH keys, IDs, URLs), always send it as plain text without Markdown formatting or directives that trigger Flex conversion.

Security / Scope (Important)

• This skill is documentation + templates for building a better LINE UX (Flex, buttons, quick replies).
• It does not ship credentials and does not automatically make external API calls.
• Anything that touches the network or third-party services must be explicitly requested by the user and only after the runtime is correctly configured.

Credentials / Setup Clarification

• LINE: Sending messages is handled by your OpenClaw LINE channel/plugin setup. This skill does not require you to declare or embed LINE_CHANNEL_ACCESS_TOKEN / LINE_CHANNEL_SECRET.
• File delivery: Intentionally not included (removed for safety). Do not upload/share local files from an agent runtime.

🏆 終極解決方案：手工 Raw Flex (The Golden Path)

若系統標籤轉換失敗，請使用 手工構建 JSON。這是最穩定且能 100% 呈現自定義 UI 的方式。

穩定發送按鈕的 JSON 模板

將此 JSON 作為純文字發送，若系統支援自動偵測則會轉換；若不支援，請改走 OpenClaw 的 LINE plugin 正規發送路徑（或由管理員在已授權的環境中操作），避免在 skill 內容中引導直接 curl 呼叫外部 API。

{
  "type": "bubble",
  "body": {
    "type": "box",
    "layout": "vertical",
    "contents": [
      { "type": "text", "text": "標題", "weight": "bold", "size": "lg" },
      { "type": "text", "text": "內文描述", "wrap": true },
      {
        "type": "button",
        "style": "primary",
        "color": "#1DB446",
        "action": {
          "type": "message",
          "label": "按鈕文字",
          "text": "回傳指令"
        }
      }
    ]
  }
}