← Back to Skills Marketplace
113
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install snapgen
Description
Use this skill when the user asks to open, run, or automate a specific desktop application. It manages the full lifecycle of automation scripts within dedica...
Usage Guidance
This skill will read and execute Python code found in your workspace using your system Python. Only install or run it if all app automation scripts in skills/snapgen/apps/ are trusted. Before use: (1) review any {PROCESS_NAME}.py files for unwanted network, file, or credential access; (2) consider running automations inside an isolated Windows VM or dedicated user account; (3) avoid exposing secrets or shared credentials to the workspace; (4) prefer installing clicknium in a controlled virtualenv rather than system-wide; (5) be cautious when following the recorder login prompt — it will ask you to perform interactive logins that could expose credentials or MFA flows. If you need higher assurance, request the actual app scripts for code review or run them in a sandbox first.
Capability Analysis
Type: OpenClaw Skill
Name: snapgen
Version: 1.0.1
The skill provides a framework for desktop application automation using the `clicknium` library. It exhibits high-risk behavior by dynamically generating and executing temporary Python scripts (`run_temp.py`) and invoking an external binary (`Clicknium.Recorder.exe`) to record and generate code. While these capabilities are aligned with the stated purpose of automating desktop tasks, the pattern of on-the-fly script creation and execution based on user-derived parameters creates a significant RCE (Remote Code Execution) attack surface, which is classified as suspicious under the vulnerability-vs-malice criteria.
Capability Assessment
Purpose & Capability
Name/description (desktop application automation) aligns with the actions described: it expects a Python environment and the clicknium automator and manages per-app automation scripts and docs.
Instruction Scope
Runtime instructions require the agent to read application's .py source, generate a driver run_temp.py inside the app folder, and execute it with the global system Python. Executing arbitrary workspace Python code with system-level interpreter grants that code full capability to read files, access network, environment variables, and other system resources. While this is functionally consistent with running user automation scripts, it is high-risk if the scripts or the workspace are not fully trusted. The skill also instructs running Clicknium.Recorder.exe to prompt user logins (which asks the user to interact manually) — this is not itself malicious but increases the chance of sensitive operations occurring during a live session.
Install Mechanism
Instruction-only skill with no install spec. The metadata suggests installing clicknium (python -m pip install clicknium>=0.2.9) but there is no automatic download/install descriptor. Lack of an install step keeps the static install risk low; dependency on clicknium is reasonable for the declared purpose.
Credentials
The skill does not request environment variables or credentials, which is appropriate. However, because it runs arbitrary Python from the workspace under the system Python, those scripts could themselves read environment variables, local configuration files, or credentials stored on disk — an implicit escalation risk not visible in the declared requirements.
Persistence & Privilege
The skill is not always-enabled and does not request persistent or cross-skill configuration changes. It does modify the workspace by creating and deleting a temporary driver script in the app folder, which is expected for its workflow.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install snapgen - After installation, invoke the skill by name or use
/snapgen - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Removed manual dependency checking and pip install logic; installs are now covered via unified metadata.
v1.0.0
Initial release of the snapgen skill for managing automation scripts per desktop application
Metadata
Frequently Asked Questions
What is SnapGen?
Use this skill when the user asks to open, run, or automate a specific desktop application. It manages the full lifecycle of automation scripts within dedica... It is an AI Agent Skill for Claude Code / OpenClaw, with 113 downloads so far.
How do I install SnapGen?
Run "/install snapgen" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is SnapGen free?
Yes, SnapGen is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does SnapGen support?
SnapGen is cross-platform and runs anywhere OpenClaw / Claude Code is available (win32).
Who created SnapGen?
It is built and maintained by SnapGen (@snapgen); the current version is v1.0.1.
More Skills