Ray-Ban glasses → voice command → WhatsApp → OpenClaw auto-routes your photo into the right database. Hands-free life logging.
Security Analysis
high confidenceThe skill's instructions, scope, and required resources are consistent with its stated purpose (routing images from Ray‑Ban/WhatsApp into user‑configured destinations); it is an instruction-only package and does not request unrelated credentials or installs.
Name/description (vision → WhatsApp → OpenClaw → destination DB) matches the provided materials. The package contains only templates and instructions; it asks the user to provide the Meta/WhatsApp link, an OpenClaw WhatsApp session, and destination DB credentials—these are appropriate and expected for the stated routing functionality.
SKILL.md and sample files instruct the agent to detect incoming WhatsApp image messages, classify intent, and forward image URLs to configured specialist sessions using sessions_send and message tools. The scope stays within the described routing task, but it explicitly forwards image URLs to whatever session keys the user configures — so correct session-key configuration is critical. Minor clarity issue: the hub file says 'Do NOT describe or analyze the image yourself' while also instructing to 'classify the image intent from the URL context or any accompanying text' (this implies classification from metadata/text rather than pixel analysis).
No install spec or third‑party downloads are included; this is instruction-only. The README suggests using the platform's installer (clawhub) which is expected. Nothing in the package pulls arbitrary code or writes files.
The skill declares no required environment variables or credentials. It reasonably expects the user to provide external connections (Meta/WhatsApp, OpenClaw session, destination DB API keys) but does not request or attempt to capture them itself. This is proportionate to the skill's purpose.
always is false and disable-model-invocation is default (agent may invoke autonomously, which is normal). The skill does not request elevated or permanent system presence and does not modify other skills or system‑wide configs in the provided files.
Guidance
This package is an instruction-only routing template and appears coherent, but before installing: (1) confirm you control the OpenClaw instance and the WhatsApp session used to receive images (do not point it at someone else’s account); (2) only configure session keys that map to trusted destinations — the skill will forward image URLs to whatever session keys you supply; (3) store and supply destination DB credentials yourself and keep them secret (the skill does not request them, but downstream agents will need them); (4) review SAMPLE_AGENT.md and SAMPLE_SOUL_WINE.md and test with non‑sensitive images first to verify routing behavior; (5) be mindful that images may contain PII — only forward to services you trust (Notion, Discord, Airtable, etc.). If you need stronger assurance, ask the author for runnable code, a homepage, or an explicit privacy/security audit of how your OpenClaw instance handles forwarded media.
Latest Release
v2.3.3
Forced re-publish with version bump to v2.3.3 to ensure UI refresh.
More by @JonathanJing
Published by @JonathanJing on ClawHub
