← Back to Skills Marketplace
175
Downloads
0
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install matrix-server-management
Description
Manage the Tuwunel Matrix Homeserver (register users, create rooms, manage room membership, upload files to media server). Use only for explicit standalone a...
Usage Guidance
This skill appears to be a straightforward local Matrix admin recipe, but it references sensitive container environment variables (HICLAW_MATRIX_DOMAIN, HICLAW_ADMIN_USER, HICLAW_REGISTRATION_TOKEN, HICLAW_MANAGER_PASSWORD) that are not declared in the skill metadata. Before installing or using it: 1) Confirm these env vars exist in the runtime container and that you trust their source; 2) Treat the registration token and admin password as secrets — do not install the skill in an environment where those values are unknown or exposed to untrusted agents; 3) Preferably update the skill metadata to declare required.env (or ask the publisher to) so reviewers and deployers know what credentials are needed; 4) Run the skill only in an isolated environment or with explicit human invocation until you verify behavior; 5) If you did not obtain the skill from a trusted publisher (source unknown/homepage none), consider asking for provenance or a code-backed implementation (not just instructions) before granting it access to live admin credentials.
Capability Analysis
Type: OpenClaw Skill
Name: matrix-server-management
Version: 1.0.0
The skill provides legitimate administrative functionality for managing a local Matrix homeserver (Tuwunel/conduwuit) via its API at 127.0.0.1:6167. It includes standard operations such as user registration, room management, and file uploads to the media server using pre-configured environment variables (e.g., HICLAW_REGISTRATION_TOKEN). No evidence of malicious intent, data exfiltration to external domains, or prompt injection was found in SKILL.md.
Capability Assessment
Purpose & Capability
Name and description (manage a local Tuwunel/Matrix homeserver: register users, create rooms, send messages, upload media) line up with the concrete curl-based API calls in SKILL.md. Operations target the local Matrix HTTP API at 127.0.0.1:6167, which is coherent for this purpose.
Instruction Scope
SKILL.md instructs the agent to run curl against the local homeserver and to upload files from arbitrary paths — which is consistent with admin tasks — but it explicitly reads several environment variables from the container (HICLAW_MATRIX_DOMAIN, HICLAW_ADMIN_USER, HICLAW_REGISTRATION_TOKEN, HICLAW_MANAGER_PASSWORD). The skill metadata did not declare these as required, so the runtime instructions access secrets/config that are not represented in the declared surface.
Install Mechanism
Instruction-only skill with no install spec and no code files. This minimizes install-time risk (nothing is downloaded or written to disk by an installer).
Credentials
The specific env vars referenced are sensitive but relevant to Matrix admin operations (registration token, admin username/password, domain). The proportionality of the types of secrets is reasonable for the described task, but the package metadata failing to declare them (requires.env / primary credential) is an incoherence and a potential security/operational risk: the skill will attempt to use secrets that were neither documented in the registry nor presented to reviewers.
Persistence & Privilege
The skill is not always-on, does not request system-wide persistence, and does not modify other skills' configuration. It defaults to allowing autonomous invocation (disable-model-invocation: false) which is normal for skills; no additional privilege escalation is requested.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install matrix-server-management - After installation, invoke the skill by name or use
/matrix-server-management - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of matrix-server-management skill.
- Provides admin tools for managing the Tuwunel Matrix homeserver: register users, create rooms, manage room membership, upload files via media API.
- Clearly documents required environment variables (pre-set in Manager container).
- Explains worker, admin, and room permissions, including power level overrides for each role.
- Documents how to send messages, including support for Matrix MSC3952 @mentions (critical for Worker functionality).
- Details media upload process and how to share files with the admin using Matrix file messages.
- Includes examples for key actions such as user registration, room creation, sending messages (with and without mentions), file upload, listing rooms, and fetching room messages.
- Emphasizes operational constraints: use only for explicit admin requests, as workers/projects trigger their own Matrix operations internally.
Metadata
Frequently Asked Questions
What is Matrix Server Management?
Manage the Tuwunel Matrix Homeserver (register users, create rooms, manage room membership, upload files to media server). Use only for explicit standalone a... It is an AI Agent Skill for Claude Code / OpenClaw, with 175 downloads so far.
How do I install Matrix Server Management?
Run "/install matrix-server-management" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Matrix Server Management free?
Yes, Matrix Server Management is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Matrix Server Management support?
Matrix Server Management is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Matrix Server Management?
It is built and maintained by Monty (@montycn); the current version is v1.0.0.
More Skills