← Back to Skills Marketplace
111
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install universal-autostart
Description
Cross-platform auto-start service manager for Windows and macOS. Supports installing, uninstalling, starting, stopping, and monitoring services with automati...
Usage Guidance
This package implements a plausible auto-start/service manager and its install scripts will create system-level tasks (Windows: schtasks running as SYSTEM; macOS: launchd plist) which require admin rights — that part is expected. However: 1) The repository includes publish_textonly.py, which contains a hard-coded API key and an upload routine that will POST local files to an external SkillHub endpoint. That file is unrelated to running or installing services and could exfiltrate files if executed. Do NOT run any scripts you don't understand. 2) Before running install scripts as Administrator/sudo, inspect universal_service.py and the install scripts for any network calls or paths that reference sensitive directories. 3) Remove or sanitize publish_textonly.py (or at minimum the API key) if you plan to keep these files locally; do not run it unless you intend to publish. 4) Test in an isolated environment or VM first; avoid installing system-level tasks on production machines until you've verified behavior. If you want, I can point out the exact lines with the hard-coded key and the upload call and review the rest of universal_service.py for additional network or file access (the file was truncated in places).
Capability Analysis
Type: OpenClaw Skill
Name: universal-autostart
Version: 1.0.0
The bundle provides cross-platform service persistence (autostart) on Windows and macOS using 'schtasks' and 'launchctl' via 'universal_service.py'. While these are high-risk capabilities, they align with the stated purpose of a service manager. However, the inclusion of 'publish_textonly.py' is highly irregular as it contains a hardcoded API key ('sk-skillhubs-JNpqszhN_oGF3u3xGEAMpJIjG6V2_etC') for the 'skillhub.club' platform, representing a significant security vulnerability (credential exposure). Additionally, the core logic allows for the execution of arbitrary commands defined in JSON configuration files, which could be abused if the configuration source is untrusted.
Capability Tags
Capability Assessment
Purpose & Capability
The name, description, SKILL.md, and install scripts are consistent with a cross‑platform auto‑start/service manager and legitimately require python and admin privileges. However, the repository also contains publish_textonly.py which performs an unrelated network upload and embeds a hard-coded SKILLHUB API key — this credential and upload behavior are not required for the stated purpose and are unexplained.
Instruction Scope
The SKILL.md instructs administrative operations appropriate for installing services (creating system tasks / launchd plists). That scope is expected. The instructions do not tell the user to run publish_textonly.py, but that file exists and can transmit local skill files to an external endpoint; because it is present in the package it expands the security surface even if not mentioned in SKILL.md.
Install Mechanism
There is no install spec (instruction-only skill) and install scripts are local shell/batch scripts (install_macos.sh, uninstall_macos.sh, suggested install .bat). No remote downloads or archive extraction are used, which reduces supply-chain risk. The included files will be written to disk when the user unpacks or installs the skill; that's expected for an instruction-only package containing helper scripts.
Credentials
The skill declares no required environment variables, which is proportionate. But publish_textonly.py contains a hard-coded API key (SKILLHUB_API_KEY) and a SkillHub upload flow — a secret embedded in the package and an ability to POST local files to an external service are disproportionate and not justified by the service manager purpose. Also some operations (creating system tasks as SYSTEM on Windows) require elevated privileges — that's expected for a system-level auto-start manager, but you should be aware.
Persistence & Privilege
The skill does require and instruct elevated privileges for installation (installer scripts call sudo / ask to run as admin and the Windows task is created to run as SYSTEM). always:false is set (normal). Autonomous model invocation is allowed by default; combined with the ability to install system services this increases risk if the agent had unchecked autonomy, but that is a platform-level consideration rather than a defect in the skill itself.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install universal-autostart - After installation, invoke the skill by name or use
/universal-autostart - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Universal-autostart v1.0.0
- Initial release of a cross-platform auto-start service manager for Windows and macOS.
- Supports installing, uninstalling, starting, stopping, and monitoring background services.
- Enables automatic restart of services on failure.
- Provides persistent service setup that survives system reboots using sc/schtasks (Windows) or launchd (macOS).
Metadata
Frequently Asked Questions
What is universal-autostart?
Cross-platform auto-start service manager for Windows and macOS. Supports installing, uninstalling, starting, stopping, and monitoring services with automati... It is an AI Agent Skill for Claude Code / OpenClaw, with 111 downloads so far.
How do I install universal-autostart?
Run "/install universal-autostart" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is universal-autostart free?
Yes, universal-autostart is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does universal-autostart support?
universal-autostart is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created universal-autostart?
It is built and maintained by steam2001 (@ahao2001); the current version is v1.0.0.
More Skills