← Back to Skills Marketplace
rendrag-git

Discord Admin

by rendrag-git · GitHub ↗ · v0.1.1 · MIT-0
cross-platform ⚠ suspicious
367
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install discord-admin-plugin
Description
Full Discord server administration suite for OpenClaw — roles, moderation, channels, invites, webhooks, audit log, and member management.
README (SKILL.md)

Discord Admin Plugin

Full Discord server administration suite for OpenClaw. Manage roles, moderate users, configure channels, handle invites and webhooks, and query audit logs — all through a single unified tool.

What it does

Registers a discord_admin tool that exposes 22 administrative actions for Discord servers. The plugin connects its own Discord.js client using your bot token and provides structured JSON responses for every operation.

Features

  • Role Management — Create, edit, and delete roles with color, hoist, mentionable, and permission options
  • Moderation — Kick, ban, unban, timeout, untimeout, and warn users (warnings sent via DM embed)
  • Channel Admin — Lock, unlock, clone, set slowmode, and make channels private with role-based access
  • Bulk Delete — Purge up to 100 messages from a channel
  • Invites — Create, list, and delete server invites with max age/uses/temporary options
  • Webhooks — Create, list, and delete webhooks by channel or guild
  • Server Info — Fetch guild metadata including member count, boost level, channel/role counts
  • Audit Log — Query audit log entries with optional action type filter
  • Member List — List members with optional role filter
  • Nickname Management — Set or clear member nicknames

Setup

  1. Install the plugin and its dependencies:

    clawhub install discord-admin-plugin
    cd ~/.openclaw/skills/discord-admin-plugin && npm install
    
  2. Configure your Discord bot token in your OpenClaw config (this is the only credential required — it is read from channels.discord.token and never sent anywhere except the Discord gateway):

    {
      "channels": {
        "discord": {
          "token": "YOUR_BOT_TOKEN"
        }
      }
    }
    
  3. Ensure your bot has the required gateway intents enabled in the Discord Developer Portal:

    • Guilds
    • Guild Members (privileged)
    • Guild Moderation
    • Guild Messages
    • Guild Invites
    • Guild Webhooks
  4. Restart your gateway: openclaw gateway restart

Credentials & Permissions

This plugin requires a Discord bot token (channels.discord.token in OpenClaw config). The token is used exclusively to connect to the Discord gateway — it is never transmitted to any other endpoint.

Required bot permissions: Manage Roles, Kick Members, Ban Members, Moderate Members, Manage Channels, Manage Messages, Create Instant Invite, Manage Webhooks, View Audit Log, Manage Nicknames.

Required privileged intents: Guild Members (for member listing, kicks, timeouts, nickname changes).

Use a bot token with the minimum permissions your use case needs. Avoid using a full-admin token if you only need a subset of actions.

Actions

Action Description
role-create Create a new role
role-edit Edit an existing role
role-delete Delete a role
kick Kick a member
ban Ban a user
unban Unban a user
timeout Timeout a member (up to 28 days)
untimeout Remove a timeout
warn Send a warning DM embed
bulk-delete Purge 2-100 messages
channel-clone Clone a channel
channel-lock Deny SendMessages for @everyone
channel-unlock Reset SendMessages for @everyone
channel-slowmode Set slowmode (0-21600s)
channel-private Hide channel, grant to specific roles
invite-create Create an invite
invite-list List server invites
invite-delete Delete an invite
webhook-create Create a webhook
webhook-list List webhooks
webhook-delete Delete a webhook
server-info Get server metadata
audit-log Query audit log
member-list List members
nickname-set Set a member's nickname
Usage Guidance
This plugin appears coherent for Discord server administration, but exercise normal caution before installing: 1) Only provide a bot token with the minimum permissions and privileged intents needed — avoid giving a full-owner/admin token. Use a test bot/server if possible. 2) The package is authored in TypeScript (index.ts) and uses npm dependencies (discord.js); ensure your OpenClaw runtime can run or build TypeScript plugins. 3) Review the code locally (index.ts) before running to confirm there are no hidden network calls or logging of the token; you can also run it in an isolated/test environment first. 4) Keep the bot token secret and rotate it if you revoke or change permissions. If you want additional assurance, provide the full (untruncated) index.ts and I can look for any network calls or operations beyond the Discord API.
Capability Analysis
Type: OpenClaw Skill Name: discord-admin-plugin Version: 0.1.1 The discord-admin-plugin provides a high-privilege administration suite for Discord servers, including destructive actions like banning users, deleting roles, and purging messages. While the code in index.ts is functionally aligned with the stated purpose and lacks evidence of intentional malice or data exfiltration, the broad administrative surface granted to an AI agent—combined with the lack of mandatory human-in-the-loop confirmations for destructive operations (acknowledged as a security TODO in the code)—presents a significant risk. The plugin requires extensive permissions and privileged gateway intents, making it a high-impact target for prompt injection attacks against the agent.
Capability Assessment
Purpose & Capability
Name/description (Discord server administration) match the declared primary credential (DISCORD_TOKEN), required binary (node), and the actions described in SKILL.md and index.ts (role/channel/moderation/webhook operations). Nothing requested appears unrelated to Discord administration.
Instruction Scope
SKILL.md instructs the agent to install, configure a bot token from OpenClaw config, enable Discord intents, and restart the gateway. The runtime instructions and action list are narrowly scoped to Discord administration. The manifest and code indicate the token is used to connect a discord.js client; the instructions do not ask the agent to read unrelated files or exfiltrate data.
Install Mechanism
There is no remote-download install step; package.json declares standard dependencies (discord.js, typebox) and the plugin's openclaw.install step is simply `npm install`. This is an expected install mechanism for a Node-based plugin and is proportionate to the functionality. (Note: index.ts is TypeScript — the environment must support running TS or build/transpile it; this is an operational, not security, concern.)
Credentials
Only a single credential (DISCORD_TOKEN) is declared as required and mapped to a clear config path (channels.discord.token). That credential is necessary and expected for a bot that manages a guild. No unrelated secrets or multiple unrelated credentials are requested.
Persistence & Privilege
The plugin is not force-enabled (always: false) and uses normal service/tool registration. It does not request persistent, system-wide privileges in the manifest. Autonomous invocation is enabled by default (normal for skills) but is not combined with other red flags.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install discord-admin-plugin
  3. After installation, invoke the skill by name or use /discord-admin-plugin
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.1
Fix security scan findings: - Declare bot token as primaryEnv credential with sensitive flag - Add credentials array with configPath and required intents - Document npm install step - Add Credentials & Permissions section to SKILL.md - List required Discord bot permissions in plugin metadata
v0.1.0
Initial release — full Discord server administration suite with 22 actions.
Metadata
Slug discord-admin-plugin
Version 0.1.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is Discord Admin?

Full Discord server administration suite for OpenClaw — roles, moderation, channels, invites, webhooks, audit log, and member management. It is an AI Agent Skill for Claude Code / OpenClaw, with 367 downloads so far.

How do I install Discord Admin?

Run "/install discord-admin-plugin" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Discord Admin free?

Yes, Discord Admin is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Discord Admin support?

Discord Admin is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Discord Admin?

It is built and maintained by rendrag-git (@rendrag-git); the current version is v0.1.1.

💬 Comments