← Back to Skills Marketplace
104
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install remote-install
Description
Automates remote Windows software installation by detecting installers and controlling GUI to silently install .exe/.msi packages like Office, Adobe, and Chr...
Usage Guidance
This skill implements GUI automation for Windows installs, which can be useful, but it contains undeclared remote-control code (RustDeskController) and actively logs remote IDs and passwords to a local log file. Before using: (1) don't supply real credentials until you confirm how they are handled; (2) inspect/modify the code to remove or redact logging of sensitive inputs (avoid logging passwords/IDs); (3) run only on test or controlled machines with no sensitive data; (4) require explicit, documented consent and a secure method for passing remote credentials (avoid plaintext in logs/config); (5) consider requiring RustDesk be declared as a dependency and document the remote-connection workflow. If you are not comfortable reviewing or changing the script, treat this skill as risky and avoid installing it on production or personal machines.
Capability Analysis
Type: OpenClaw Skill
Name: remote-install
Version: 1.0.0
The skill bundle provides automated remote software installation by programmatically controlling the RustDesk remote desktop client and using GUI automation (pywinauto/pyautogui). While the behavior aligns with the stated purpose in SKILL.md, the script scripts/remote_installer.py contains a shell injection vulnerability in the run_command function due to the use of subprocess.run(shell=True) with unsanitized input. The capability to automate remote access credentials and perform high-privilege GUI interactions (clicking 'Next' and 'Install' buttons) poses a significant security risk if the agent is manipulated via prompt injection, though no clear evidence of intentional malice or data exfiltration was found.
Capability Assessment
Purpose & Capability
The skill claims to automate Windows installer GUIs which matches the included Python script, but the code embeds a RustDeskController (connect/start/find RustDesk windows, accept remote ID/password) even though the SKILL.md and metadata do not declare RustDesk as a required integration or request any remote credentials. The registry access and GUI control are coherent for local installs, but the implicit remote-control capability is not documented in the description or requirements (no required binaries listed).
Instruction Scope
SKILL.md instructs scanning user folders, detecting .exe/.msi and automating clicks — which is coherent — but the runtime code also supports connecting to remote machines via RustDesk and logs the remote ID and password (logging.info includes credentials). The SKILL.md does not explain how remote IDs/passwords are obtained, handled, or required, and it claims 'Only run with user authorization' without specifying how credentials or consent are managed.
Install Mechanism
This is an instruction-only skill with a Python script and a requirements.txt listing standard packages (pyautogui, pywinauto, Pillow). There is no download from arbitrary URLs or extract/install of third-party code beyond pip-installable libraries. That said, these GUI automation packages require platform-level permissions but pose no unusual installer-hosting risk.
Credentials
The skill declares no environment variables or credentials but the code will interact with the Windows registry, filesystem (Desktop/Downloads/Documents), and may accept remote IDs/passwords for RustDesk. Critically, the code logs remote IDs and passwords to installer.log, which is disproportionate for the stated purpose and risks credential exposure. There are no justifications in SKILL.md for capturing or logging sensitive authentication material.
Persistence & Privilege
The skill is not marked always:true, does not modify other skills, and writes only a local installer.log and uses config.json in its directory. It does require GUI access and may need elevated permissions to install software, but it does not request persistent platform privileges in metadata.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install remote-install - After installation, invoke the skill by name or use
/remote-install - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of remote-install for automated Windows software deployment.
- Automates installation of software packages (.exe, .msi, .zip, .rar) on Windows via installer detection and GUI interaction.
- Supports unattended installations for common software like Office, Adobe, Chrome, and 7-Zip.
- Provides configurable options for timeouts, retries, and UI element recognition.
- Returns detailed JSON summaries of installation results.
- Excludes Linux/macOS and package manager/containerized installs.
- Includes security measures: user authorization required and complete operation logging.
Metadata
Frequently Asked Questions
What is Remote Install?
Automates remote Windows software installation by detecting installers and controlling GUI to silently install .exe/.msi packages like Office, Adobe, and Chr... It is an AI Agent Skill for Claude Code / OpenClaw, with 104 downloads so far.
How do I install Remote Install?
Run "/install remote-install" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Remote Install free?
Yes, Remote Install is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Remote Install support?
Remote Install is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Remote Install?
It is built and maintained by 403914291 (@403914291); the current version is v1.0.0.
More Skills