← Back to Skills Marketplace
138
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install openclaw-buddy
Description
Generate a unique deterministic virtual pet buddy based on your user ID, featuring species, rarity, stats, cosmetics, and personality in ASCII art format.
Usage Guidance
This skill appears coherent and low-risk: it deterministically generates a virtual pet from a user ID using the included JS file and does not request credentials or network access. Before installing, verify two simple points: (1) ensure the agent environment has Node.js available (the SKILL.md instructs running node but metadata didn't declare Node as a required binary), and (2) inspect the remainder of scripts/buddy.js (the provided snippet was truncated) to confirm there are no unexpected network calls, child_process.exec/spawn usage, or filesystem operations. Also consider the privacy implication of letting users supply arbitrary IDs (the skill allows checking other people's IDs) — decide whether you want to restrict that behavior in your deployment. If Node is not present or you cannot inspect the full file, treat the Node requirement / truncated file as an installation blocker.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-buddy
Version: 1.0.0
The skill implements a virtual pet generator using deterministic hashing and a PRNG. While the logic in `scripts/buddy.js` is benign, the `SKILL.md` instructions introduce a shell injection vulnerability by directing the AI agent to execute a command-line script using a potentially user-controlled `<user_id>` string without any input sanitization. This allows for arbitrary command execution if a user provides a crafted ID containing shell metacharacters.
Capability Assessment
Purpose & Capability
Name/description match the provided files: SKILL.md describes deterministic buddy generation and the repo contains a JS generator implementing that logic. One minor mismatch: SKILL.md and scripts/buddy.js expect Node to be available and instruct running node <path>/buddy.js, but the registry metadata lists no required binaries. This is a bookkeeping inconsistency (Node should be declared) but does not indicate malicious behavior.
Instruction Scope
Runtime instructions are narrow: obtain a user ID from message context or user input, run the bundled buddy.js with that ID, then send the generated stdout card to the user. The instructions only reference message-sender IDs (open_id or platform user ID) which is appropriate for the stated purpose. There are no instructions to read arbitrary files, access credentials, or transmit data to external endpoints.
Install Mechanism
No install spec; this is instruction-only with an included JavaScript file. No downloads, external packages, or archive extraction are present. The skill will require a Node runtime to execute the included script (not declared in metadata), but it does not attempt to install software itself.
Credentials
The skill declares no required environment variables, no credentials, and the visible code does not access environment secrets or config paths. The only input needed is the user ID (from message context or manual input), which is proportionate to the functionality.
Persistence & Privilege
The skill is not always-enabled and does not request special persistent privileges. It does not modify other skills or system configurations (based on provided files). Autonomous invocation is allowed by platform defaults but is normal for a user-invocable skill of this type.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-buddy - After installation, invoke the skill by name or use
/openclaw-buddy - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: deterministic virtual pet buddy generator with 18 species, 5 rarity tiers, ASCII art sprites, bilingual CN/EN support
Metadata
Frequently Asked Questions
What is OpenClaw Buddy?
Generate a unique deterministic virtual pet buddy based on your user ID, featuring species, rarity, stats, cosmetics, and personality in ASCII art format. It is an AI Agent Skill for Claude Code / OpenClaw, with 138 downloads so far.
How do I install OpenClaw Buddy?
Run "/install openclaw-buddy" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OpenClaw Buddy free?
Yes, OpenClaw Buddy is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does OpenClaw Buddy support?
OpenClaw Buddy is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OpenClaw Buddy?
It is built and maintained by Rong (@kylinr); the current version is v1.0.0.
More Skills