← Back to Skills Marketplace
Nerve Bridge Skill
by
88901111hz-lang
· GitHub ↗
· vv1.0.0
651
Downloads
0
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install nerve-bridge-skill
Description
Bi-directional control of Trae via macOS AppleScript with built-in feedback mechanism. Use when needing to execute code/commands in Trae IDE and wait for com...
Usage Guidance
This skill is coherent with its purpose, but it automates an editor/IDE to run whatever payload you send. Before installing or using it: (1) only send instructions you trust — the IDE will execute them; (2) avoid including secrets in the payload or clipboard; (3) confirm you are comfortable granting Accessibility permissions to enable the automation; (4) inspect the script (included) and consider running in a restricted environment if you are unsure. If you need stronger guarantees, avoid pasting sensitive code via the clipboard or add validation/sandboxing on the Trae side.
Capability Analysis
Type: OpenClaw Skill
Name: nerve-bridge-skill
Version: v1.0.0
The skill is classified as suspicious due to a significant code injection vulnerability in `scripts/nerve_bridge.py`. The script directly concatenates unsanitized user input (`sys.argv[1]`) with a Python hook, then copies this combined payload to the clipboard and uses AppleScript to paste and execute it within the 'Trae' IDE. This allows for arbitrary code execution on the host system if a malicious instruction is provided, but the skill itself does not contain explicit malicious payloads or instructions for harmful behavior.
Capability Assessment
Purpose & Capability
The name/description match the actual behavior: it automates Trae via AppleScript, uses the system clipboard, and waits for a feedback file. Required binaries (python3, osascript) and macOS Accessibility permission are expected for this purpose.
Instruction Scope
Instructions and the Python script limit activity to copying payload to the clipboard, activating Trae, simulating keystrokes, and waiting for ~/.openclaw/workspace/trae_feedback.json. This is coherent, but note that the skill relies on Trae executing the injected payload (including arbitrary code you provide). Also, using pbcopy (clipboard) can leak clipboard contents if the payload includes sensitive data.
Install Mechanism
No install spec — instruction-only with a single helper script. Nothing is downloaded or written to install locations beyond the script itself being included in the skill bundle.
Credentials
No environment variables, credentials, or unrelated config paths are requested. The only filesystem interaction is the feedback file under the user's home directory, which is consistent with the stated feedback mechanism.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and only writes/reads its own feedback file path. It requires macOS Accessibility permissions for UI automation, which is expected for AppleScript-driven automation.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install nerve-bridge-skill - After installation, invoke the skill by name or use
/nerve-bridge-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
vv1.0.0
Bi-directional control of Trae with feedback mechanism via AppleScript
Metadata
Frequently Asked Questions
What is Nerve Bridge Skill?
Bi-directional control of Trae via macOS AppleScript with built-in feedback mechanism. Use when needing to execute code/commands in Trae IDE and wait for com... It is an AI Agent Skill for Claude Code / OpenClaw, with 651 downloads so far.
How do I install Nerve Bridge Skill?
Run "/install nerve-bridge-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Nerve Bridge Skill free?
Yes, Nerve Bridge Skill is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Nerve Bridge Skill support?
Nerve Bridge Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Nerve Bridge Skill?
It is built and maintained by 88901111hz-lang (@88901111hz-lang); the current version is vv1.0.0.
More Skills