← Back to Skills Marketplace
1745
Downloads
1
Stars
4
Active Installs
1
Versions
Install in OpenClaw
/install pdauth
Description
Dynamic OAuth for AI agents via Pipedream. Generate OAuth links for 2500+ APIs, let users authorize, then call MCP tools on their behalf.
Usage Guidance
This skill largely does what it says (generate OAuth links and call APIs via Pipedream), but you should proceed cautiously. Before installing: 1) Verify the npm package publisher and inspect the pdauth package source (or the GitHub repo) to ensure you trust its install-time behavior. 2) Ask the publisher which credentials 'pdauth config' requires, where those credentials/tokens are stored (local files vs. Pipedream account), and how to revoke them. 3) Limit OAuth scopes when authorizing and prefer short-lived or per-action consent. 4) Consider running the npm package in an isolated environment first (container or VM) and review its code. 5) If you need an explicit guarantee, request the skill metadata be updated to declare required env vars/config paths and a clear data-handling policy.
Capability Analysis
Type: OpenClaw Skill
Name: pdauth
Version: 1.0.0
The OpenClaw AgentSkills bundle for 'pdauth' is classified as benign. The `SKILL.md` provides clear instructions for the AI agent to use the `pdauth` CLI tool to manage OAuth connections for various APIs via Pipedream. All sensitive actions, such as connecting to an application, explicitly require the agent to generate an OAuth link and present it to the user for authorization. There are no instructions for the agent to bypass user consent, exfiltrate data, execute arbitrary remote code, establish persistence, or engage in prompt injection attacks against itself. The installation method uses a standard Node.js package manager command, which is not inherently malicious.
Capability Assessment
Purpose & Capability
Name/description (dynamic OAuth via Pipedream) match the declared required binary ('pdauth') and the install spec (npm package 'pdauth' that provides a pdauth CLI). The listed workflows (connect, status, call) are consistent with the stated purpose.
Instruction Scope
SKILL.md instructs the agent to generate OAuth links, ask the user to authorize, and then call tools via pdauth — all in-scope. It does not instruct reading unrelated system files or secrets. However, it explicitly tells operators to run 'pdauth config' to set up Pipedream credentials without describing what credentials are needed or where they're stored, leaving an important operational detail unspecified.
Install Mechanism
Install uses an npm package ('pdauth') that creates the 'pdauth' binary; this is expected for a CLI. npm packages can execute arbitrary install-time code, so this is a moderate-risk install mechanism but not unusual for a CLI tool.
Credentials
SKILL.md refers to configuring Pipedream credentials ('pdauth config') and to long-lived OAuth connections for many apps, yet the skill metadata declares no required env vars or primary credential. The lack of declared credentials/config-paths is an incoherence: the skill will need credentials (and will store tokens somewhere) but does not state this up front. Also, enabling OAuth for '2500+ APIs' means broad potential access once users authorize—this is powerful and should be explicitly justified and constrained.
Persistence & Privilege
The skill does not request 'always: true' and has no OS/config path requirements declared. That said, OAuth tokens obtained via the flow are likely to persist in Pipedream (or local pdauth config), allowing the agent to act on users' behalf across sessions. Autonomous invocation (allowed) combined with granted OAuth scopes increases blast radius, but autonomous invocation itself is the platform default.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pdauth - After installation, invoke the skill by name or use
/pdauth - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of pdauth — Dynamic OAuth for AI agents
- Enables AI agents to generate OAuth links for 2500+ APIs using Pipedream and authorize users.
- Provides commands to connect apps, check user connection status, list tools, and call API tools on behalf of users.
- Supports popular apps (Slack, Spotify, Notion, Google Sheets, Gmail, GitHub, etc.) with simple CLI commands.
- Offers a workflow for user authorization and clear strategies for managing user identities.
- Includes error handling guidance and usage tips for seamless integration.
Metadata
Frequently Asked Questions
What is Pdauth?
Dynamic OAuth for AI agents via Pipedream. Generate OAuth links for 2500+ APIs, let users authorize, then call MCP tools on their behalf. It is an AI Agent Skill for Claude Code / OpenClaw, with 1745 downloads so far.
How do I install Pdauth?
Run "/install pdauth" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pdauth free?
Yes, Pdauth is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Pdauth support?
Pdauth is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pdauth?
It is built and maintained by G9Pedro (@g9pedro); the current version is v1.0.0.
More Skills