← Back to Skills Marketplace
homesickjava

Coze-Power

by homesickjava · GitHub ↗ · v1.0.5 · MIT-0
cross-platform ⚠ suspicious
48
Downloads
0
Stars
0
Active Installs
6
Versions
Install in OpenClaw
/install coze-power
Description
Bridge your Coze bots to local machine capabilities. Coze bots run in the cloud and can't access local files, run commands, or control your machine — Coze-Po...
README (SKILL.md)

Coze-Power: Bridge Coze Bots to Local Capabilities

Overview

Coze bots are powerful, but they live in the cloud. They can't read your local files, run terminal commands, or interact directly with your machine. Coze-Power solves this with a lightweight HTTP server that exposes local tools through a standard OpenAPI interface that Coze plugins can consume.

Architecture

Coze-Power Architecture

Quick Start (5 minutes)

1. Start the server

cd coze-power
python3 server.py
# Server starts on http://localhost:8899

2. Expose it publicly (one of these)

# Using ngrok (recommended for beginners)
ngrok http 8899
# → https://xxxx.ngrok.io  (copy this URL)

# Or using Cloudflare Tunnel
cloudflared tunnel --url http://localhost:8899

3. Import the Coze plugin

  1. In Coze Studio, go to Plugins → Create Plugin
  2. Import from OpenAPI → Upload assets/openapi-spec.json
  3. Set Server URL to your ngrok/cloudflare URL (e.g. https://xxxx.ngrok.io)
  4. Add API key authentication: header name X-API-Key, value from your config.json
  5. Save and enable the plugin
  6. Add the plugin to your Coze bot

4. Test it

In your Coze bot, try:

"Search the web for latest AI news" "List files on my desktop" "Show me the current system status"

Available Tools

Tool Method Endpoint Description
Web Search POST /tools/web-search Search the web and return results
Read File POST /tools/read-file Read content from local files
Write File POST /tools/write-file Write content to local files
List Directory POST /tools/list-dir List files in a directory
Run Command POST /tools/run-command Execute shell commands
System Info POST /tools/system-info Get OS, CPU, memory info
Read Clipboard POST /tools/clipboard-read Read clipboard contents
Write Clipboard POST /tools/clipboard-write Write to clipboard
Send Notification POST /tools/notify Send desktop notification
Health Check GET /health Check server status

Configuration

Create config.json in the skill directory:

{
  "api_key": "your-secret-api-key",
  "host": "0.0.0.0",
  "port": 8899,
  "allowed_commands": ["ls", "pwd", "cat", "echo", "python3", "node"],
  "allowed_paths": ["/home", "/tmp"],
  "max_file_size_kb": 1024
}

Security

⚠️ You are exposing your local machine to the internet. Follow these rules:

  • Always use API key authentication (never run without it)
  • Use allowed_commands and allowed_paths to restrict access
  • For production: add HTTPS via ngrok (it automatically provides TLS)
  • Never expose this server without authentication
  • Consider running it in a Docker container for isolation

Coze Plugin Setup (Detailed)

See references/coze-plugin-setup.md for step-by-step Coze configuration.

Examples

See references/examples.md for real Coze bot prompts and expected behaviors.

API Reference

See references/api-reference.md for complete endpoint documentation.

Usage Guidance
Install only if you intentionally want a cloud Coze bot to reach your machine. Before running it, change the API key, avoid public exposure unless necessary, narrow allowed_paths and allowed_commands to the minimum, run it in a container or VM, and do not allow clipboard reads or file writes around sensitive data.
Capability Tags
cryptorequires-sensitive-credentials
Capability Assessment
Purpose & Capability
The purpose is coherent and clearly states that Coze bots can read/write local files, execute commands, access clipboard data, and get system info, but those are high-impact local-machine capabilities exposed to a cloud bot.
Instruction Scope
The quick start tells users to expose the local server with ngrok or Cloudflare and immediately test local file/system actions; security guidance exists, but is not strong enough for the level of remote authority being enabled.
Install Mechanism
The package ships a standalone Python HTTP server and OpenAPI plugin spec; setup is straightforward, but the default host is 0.0.0.0 and the sample/default API key handling is weak for internet exposure.
Credentials
The default configuration allows broad paths such as the home directory and /home, and the command allowlist includes tools like cat, python3, node, find, tar, grep, head, and tail; this is broader than a safe default for a public bridge.
Persistence & Privilege
No autostart persistence or privilege escalation was found, but once running the server can overwrite files, read clipboard contents, and execute commands without per-action local confirmation.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install coze-power
  3. After installation, invoke the skill by name or use /coze-power
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.5
v1.0.5 — Embedded architecture diagram as data URI. Removed uguu external link.
v1.0.4
v1.0.4 — Added architecture diagram. Full English description.
v1.0.3
v1.0.3 — Added architecture diagram
v1.0.2
v1.0.2 — Added architecture diagram
v1.0.1
v1.0.1 — Fully English description and examples. Cleaned up docs.
v1.0.0
v1.0.0 — 9 local tools: web search, file read/write, directory listing, command execution, system info, clipboard, notifications. Zero-dependency Python server + Coze OpenAPI plugin ready.
Metadata
Slug coze-power
Version 1.0.5
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 6
Frequently Asked Questions

What is Coze-Power?

Bridge your Coze bots to local machine capabilities. Coze bots run in the cloud and can't access local files, run commands, or control your machine — Coze-Po... It is an AI Agent Skill for Claude Code / OpenClaw, with 48 downloads so far.

How do I install Coze-Power?

Run "/install coze-power" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Coze-Power free?

Yes, Coze-Power is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Coze-Power support?

Coze-Power is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Coze-Power?

It is built and maintained by homesickjava (@homesickjava); the current version is v1.0.5.

💬 Comments