← Back to Skills Marketplace
bluesyparty-src

Steamcommunity

by bluesyparty-src · GitHub ↗ · v1.0.1
cross-platform ✓ Security Clean
916
Downloads
0
Stars
2
Active Installs
2
Versions
Install in OpenClaw
/install steamcommunity
Description
Retrieves Steam inventory data and manages trade offers on steamcommunity.com
Usage Guidance
This skill legitimately needs your Steam ID, Web API key, and session cookies to read private inventories and send trade offers — those cookies/sessionid are effectively keys to act as your account on steamcommunity.com. Only provide them if you trust the skill's source. Prefer these precautions: 1) Use an expendable/secondary Steam account (not your main account) when testing. 2) Do not paste long-lived cookies into long-term files or public logs; provide them only in ephemeral environment variables and revoke them afterward (log out or change password to invalidate). 3) Consider limiting the skill to read-only actions (omit STEAM_COOKIES/STEAM_SESSION_ID) if you only need public inventory data. 4) After use, invalidate the session (log out) and rotate your API key if you suspect misuse. 5) If you want more assurance, request a code review or a vendor/source identity before trusting trade-capable automation.
Capability Analysis
Type: OpenClaw Skill Name: steamcommunity Version: 1.0.1 The skill bundle is designed to interact with the Steam Community and Web API for inventory management and trade offers. It explicitly requires sensitive Steam credentials (ID, API key, cookies, session ID) to be set as environment variables, which is necessary for its stated functionality. All network requests are directed to official Steam domains (steamcommunity.com, api.steampowered.com). There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts within the SKILL.md. The use of `curl` and `jq` is standard for this type of API interaction, and the instructions are clear and aligned with the skill's purpose.
Capability Assessment
Purpose & Capability
Name and description match the required assets: the skill needs SteamID, Steam Web API key, and authenticated session cookies to read private inventories and to create trade offers. Required binaries (curl and jq) are appropriate for the curl+jq usage shown.
Instruction Scope
SKILL.md is instruction-only and explicitly shows curl commands against steamcommunity.com using the provided cookies, sessionid, and API key. It does not instruct the agent to read unrelated files or credentials. It does, however, tell the user to extract sensitive cookies from their browser and export them as env vars so the agent can authenticate — this is necessary for the declared trade-offer functionality but expands the agent's power to act on your behalf (e.g., send trades).
Install Mechanism
No install spec and no code files; lowest-risk install mechanism. The skill relies on existing system binaries (curl, jq) which is consistent with the documented usage.
Credentials
The required env vars (STEAM_ID, STEAM_API_KEY, STEAM_COOKIES, STEAM_SESSION_ID) are directly relevant to the skill's purpose. They are highly sensitive (cookies and sessionid grant authenticated access) but their presence is justified by the need to access private inventories and send trade offers.
Persistence & Privilege
always is false and the skill does not request system-wide config or modify other skills. Model invocation is allowed (platform default), which combined with the auth material would permit autonomous actions, but this is expected for usable trade-offer automation.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install steamcommunity
  3. After installation, invoke the skill by name or use /steamcommunity
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Added support for managing Steam trade offers, including sending items and requesting items from other users. - Expanded setup instructions to include Steam Web API key and session ID requirements. - Updated environment variables: now requires STEAM_API_KEY and STEAM_SESSION_ID in addition to STEAM_ID and STEAM_COOKIES. - Documented new curl examples and parameters for making trade offers, with detailed explanations for partner identification and payload construction. - Skill name updated from "steamcommunity" to "steam-community-inventory". - Description now reflects inventory retrieval and trade management capabilities.
v1.0.0
- Initial release: Retrieve and browse a Steam user's inventory from steamcommunity.com. - Provides setup instructions for obtaining SteamID64 and cookies. - Includes bash/curl command examples to fetch inventories for various games. - Details response format and useful JSON fields. - Offers tips on pagination, rate limits, and working with private inventories.
Metadata
Slug steamcommunity
Version 1.0.1
License
All-time Installs 2
Active Installs 2
Total Versions 2
Frequently Asked Questions

What is Steamcommunity?

Retrieves Steam inventory data and manages trade offers on steamcommunity.com. It is an AI Agent Skill for Claude Code / OpenClaw, with 916 downloads so far.

How do I install Steamcommunity?

Run "/install steamcommunity" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Steamcommunity free?

Yes, Steamcommunity is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Steamcommunity support?

Steamcommunity is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Steamcommunity?

It is built and maintained by bluesyparty-src (@bluesyparty-src); the current version is v1.0.1.

💬 Comments