← Back to Skills Marketplace
dreamwing

ClawBridge

by dreamwing · GitHub ↗ · v1.1.1
cross-platform ⚠ suspicious
530
Downloads
0
Stars
8
Active Installs
2
Versions
Install in OpenClaw
/install clawbridge
Description
Mobile-first dashboard for OpenClaw agents showing real-time activity, token costs, and cron task control from your phone.
README (SKILL.md)

\x3Cskill> \x3Cid>clawbridge\x3C/id> \x3Cname>ClawBridge Dashboard\x3C/name> \x3Cversion>1.0.0\x3C/version> \x3Cdescription>Mobile-first mission control for OpenClaw agents. Runs as a local Node.js sidecar process, providing a web dashboard to monitor real-time agent activity, track token costs across 340+ models, and trigger cron tasks remotely. Optionally creates an outbound-only Cloudflare tunnel for remote access.\x3C/description> \x3Cauthor>DreamWing\x3C/author> \x3Chomepage>https://clawbridge.app\x3C/homepage> \x3Clicense>MIT\x3C/license> \x3Ctags>dashboard,monitoring,mobile,ui,control-panel,cost-tracking,cloudflare,tunnel\x3C/tags>

\x3C!-- What this skill installs and runs --> \x3Cruntime> \x3Ctype>node\x3C/type> \x3Centrypoint>index.js\x3C/entrypoint> \x3Cpersistence>Registers a user-level systemd service (clawbridge.service) that auto-starts on login and restarts on failure.\x3C/persistence> \x3C/runtime>

\x3C!-- System requirements --> \x3Crequires> \x3Cdependency name="node" version=">=18" required="true" /> \x3Cdependency name="npm" version=">=9" required="true" /> \x3Cdependency name="git" version="any" required="false" description="Used for incremental updates; falls back to tarball download if absent." /> \x3Cdependency name="cloudflared" version="latest" required="false" description="Downloaded automatically from github.com/cloudflare/cloudflared if Cloudflare tunnel is enabled. Only required if using remote access without a VPN (Tailscale/WireGuard)." /> \x3C/requires>

\x3C!-- Credentials / environment variables written to .env --> \x3Ccredentials> \x3Cenv name="ACCESS_KEY" description="Randomly generated 32-character hex key used to authenticate dashboard logins. Auto-generated on first install." required="true" generated="true" /> \x3Cenv name="PORT" description="Local TCP port the dashboard listens on. Defaults to 3000, auto-incremented if busy." required="false" default="3000" /> \x3Cenv name="TUNNEL_TOKEN" description="Cloudflare Tunnel token for a permanent named tunnel. Optional — omit to use a temporary Quick Tunnel instead." required="false" /> \x3Cenv name="ENABLE_EMBEDDED_TUNNEL" description="Set to 'true' when a Cloudflare tunnel (permanent or quick) is active." required="false" /> \x3Cenv name="OPENCLAW_PATH" description="Absolute path to the openclaw binary. Auto-detected from PATH; only written to .env if found." required="false" /> \x3C/credentials>

\x3C!-- Network activity --> \x3Cnetwork> \x3Cconnection purpose="Dependency install" destination="registry.npmjs.org" direction="outbound" trigger="install/update" /> \x3Cconnection purpose="Source code download" destination="github.com/dreamwing/clawbridge" direction="outbound" trigger="install/update" /> \x3Cconnection purpose="cloudflared binary download" destination="github.com/cloudflare/cloudflared" direction="outbound" trigger="install (only if tunnel enabled and cloudflared not found)" /> \x3Cconnection purpose="Cloudflare Tunnel relay" destination="*.cloudflareaccess.com, *.trycloudflare.com" direction="outbound" trigger="runtime (only if tunnel enabled)" /> \x3Cconnection purpose="Dashboard UI" destination="localhost" direction="inbound" trigger="runtime" /> \x3C/network>

\x3C!-- File system paths written or modified --> \x3Cfilesystem> \x3Cpath type="write" location="skills/clawbridge/.env" description="Stores ACCESS_KEY, PORT, and optional tunnel config." /> \x3Cpath type="write" location="skills/clawbridge/data/" description="Stores local agent log and token usage analytics." /> \x3Cpath type="write" location="~/.config/systemd/user/clawbridge.service" description="User-level systemd service unit for auto-start." /> \x3Cpath type="write" location="skills/clawbridge/cloudflared" description="cloudflared binary, only if downloaded during tunnel setup." /> \x3C/filesystem>

\x3C!-- Installation — uses the script bundled in this repository --> \x3Cinstall> curl -sL https://raw.githubusercontent.com/dreamwing/clawbridge/master/install.sh | bash \x3C/install>

\x3Cinstructions> ClawBridge installs itself as a persistent background service.

After installation, the dashboard is accessible at the local IP shown in the terminal output.
An ACCESS_KEY is generated and displayed — keep it safe, it is required to log in.

To enable remote access (optional), supply a Cloudflare Tunnel token when prompted,
or leave it blank to use a temporary Quick Tunnel URL.

To update to the latest version:
  curl -sL https://raw.githubusercontent.com/dreamwing/clawbridge/master/install.sh | bash

To stop the service:
  systemctl --user stop clawbridge

Full documentation: https://github.com/dreamwing/clawbridge/blob/master/README.md

\x3C/instructions> \x3C/skill>

ClawBridge Dashboard

Your Agent. In Your Pocket.

ClawBridge is a lightweight, mobile-first web dashboard for OpenClaw. It runs as a local sidecar process and provides:

  • 🧠 Live Activity Feed: Watch agent execution and thinking in real-time via WebSocket.
  • 💰 Token Economy: Track costs across 340+ models with daily/monthly breakdowns.
  • 🚀 Mission Control: Trigger cron jobs manually from your phone.
  • 🔒 Secure by Default: API key auth, session cookies, and optional Cloudflare Tunnel for remote access.

What This Skill Does

  1. Installs the ClawBridge Node.js app from GitHub into skills/clawbridge/
  2. Generates a random ACCESS_KEY and writes it to .env
  3. Registers a user-level systemd service for auto-start
  4. Optionally downloads cloudflared and configures a tunnel for remote access

Installation

curl -sL https://raw.githubusercontent.com/dreamwing/clawbridge/master/install.sh | bash

See README.md for full documentation.

Usage Guidance
Before installing: (1) Do NOT pipe the install URL directly to bash without inspection — fetch https://raw.githubusercontent.com/dreamwing/clawbridge/master/install.sh and review its contents first; (2) Verify the project source and release authenticity (the registry listing shows 'source unknown' while SKILL.md references dreamwing/clawbridge and a homepage), and prefer installing from a pinned release or reviewing the repo history; (3) Understand persistence: the installer creates a user systemd service and writes skills/clawbridge/.env (which will contain ACCESS_KEY and optional TUNNEL_TOKEN). Keep TUNNEL_TOKEN private and only enable remote tunnels if you trust the code and host; consider alternative remote access (VPN) if you need stronger control; (4) If you cannot audit the install script, consider running in a restricted/sandboxed environment or avoid installing. Finally, inspect what data the dashboard will read (agent logs, token usage) to confirm you’re not exposing sensitive data to a remote endpoint.
Capability Analysis
Type: OpenClaw Skill Name: clawbridge Version: 1.1.1 The skill is classified as suspicious primarily due to its installation method, which involves piping a remote shell script directly to `bash` (`curl -sL https://raw.githubusercontent.com/dreamwing/clawbridge/master/install.sh | bash`) as specified in SKILL.md. This practice introduces a significant supply chain vulnerability, allowing arbitrary code execution from an external source at install time without prior inspection. Additionally, the skill downloads and executes another external binary (`cloudflared` from github.com/cloudflare/cloudflared) and establishes persistence via a user-level systemd service, both of which are high-risk capabilities, even if declared for legitimate purposes.
Capability Assessment
ℹ Purpose & Capability
The declared capabilities (Node app sidecar, local dashboard, token tracking, optional Cloudflare tunnel) match the dependencies and files the SKILL.md describes (node/npm, .env with ACCESS_KEY, user-level systemd service, optional cloudflared). Minor inconsistency: registry metadata listed no install spec/envs, while the SKILL.md contains explicit install instructions and environment variables (ACCESS_KEY, TUNNEL_TOKEN, etc.). That mismatch is noteworthy but explainable (instruction-only skill embeds its own install steps).
⚠ Instruction Scope
The SKILL.md instructs the agent/user to run a remote install script (curl ... raw.githubusercontent.com | bash), register a user-level systemd service (~/.config/systemd/user/clawbridge.service), write a .env with an ACCESS_KEY and optional tunnel token, and optionally download and run cloudflared for a remote tunnel. These steps grant the skill persistent presence, outbound connectivity, and the ability to run arbitrary code fetched at install/update time. The instructions are somewhat high-level (no explicit safety checks) and allow the installer to enable remote access — this broad scope increases risk if the fetched scripts are malicious or compromised.
⚠ Install Mechanism
Installation is performed by piping a script from raw.githubusercontent.com into bash (curl -sL https://raw.githubusercontent.com/dreamwing/clawbridge/master/install.sh | bash). Download-and-execute from a remote URL is a high-risk install pattern because it runs arbitrary remote code at install and update time. While GitHub raw URLs are common for open-source installs, they still require manual review; the install also may fetch cloudflared and place binaries under skills/clawbridge/, creating executable artifacts on disk.
ℹ Credentials
Environment variables listed in the SKILL.md (ACCESS_KEY generated at install, PORT, TUNNEL_TOKEN, ENABLE_EMBEDDED_TUNNEL, OPENCLAW_PATH) are reasonable for a dashboard/tunnel service. No unrelated cloud credentials or broad secrets are requested. However, TUNNEL_TOKEN is sensitive (it grants remote access to the tunnel) and ACCESS_KEY is stored in a local .env; users should understand where secrets are stored and who can read skills/clawbridge/.env.
⚠ Persistence & Privilege
The skill registers a user-level systemd service that auto-starts on login and restarts on failure, and may download/run cloudflared for remote access. This gives the skill persistent background execution under the user account and network reachability (if tunneling enabled). 'always' is false and model invocation remains allowed (normal), but persistence combined with remote-access capability and remote script updates increases blast radius compared to a transient instruction-only skill.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install clawbridge
  3. After installation, invoke the skill by name or use /clawbridge
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.1
- Expanded SKILL.md with detailed system requirements, runtime, filesystem, network, and credentials documentation. - Added installation and service management instructions, including remote access setup using Cloudflare Tunnel. - Clarified what the skill installs, generates, registers, and configures. - Updated description and tags to better reflect features and supported environments.
v1.0.0
Initial release of ClawBridge Dashboard. - Provides a mobile-first dashboard for monitoring OpenClaw agent activity. - Features real-time activity feed, token cost tracking (340+ models), and manual cron job controls. - Supports auto-detection of VPNs and quick tunnel creation. - Simple zero-configuration installation process via shell script.
Metadata
Slug clawbridge
Version 1.1.1
License —
All-time Installs 8
Active Installs 8
Total Versions 2
Frequently Asked Questions

What is ClawBridge?

Mobile-first dashboard for OpenClaw agents showing real-time activity, token costs, and cron task control from your phone. It is an AI Agent Skill for Claude Code / OpenClaw, with 530 downloads so far.

How do I install ClawBridge?

Run "/install clawbridge" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is ClawBridge free?

Yes, ClawBridge is completely free (open-source). You can download, install and use it at no cost.

Which platforms does ClawBridge support?

ClawBridge is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created ClawBridge?

It is built and maintained by dreamwing (@dreamwing); the current version is v1.1.1.

More Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191115 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 Comments