← Back to Skills Marketplace
aaPanel Server Skill
by
Social5h3ll
· GitHub ↗
· v1.0.5
· MIT-0
103
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install aapanel-5h3ll
Description
aaPanel/BT-Panel server monitoring and file management skill — system resources, site status, service status, SSH logs, cron jobs, log reading, and remote fi...
README (SKILL.md)
aaPanel / BT-Panel — Monitoring & File Management
Combined server monitoring and file operations toolkit for aaPanel/BT-Panel. Supports multi-server management, resource monitoring, site status checks, service status, SSH security audits, cron job management, log reading, and remote file/directory operations.
Skill version: 0.1.0-beta
aaPanel dependency: >= 9.0.0 | Python >= 3.10
aaPanel Skills Ecosystem
This is a combined skill containing both monitoring and file management:
| Capability | Description |
|---|---|
| Monitoring | CPU, memory, disk, network, site status, SSL certs, services, SSH logs, cron jobs |
| File Operations | Browse, read, edit, create, delete, chmod files and directories |
Official aaPanel: https://github.com/aaPanel
Quick Start
1. Add a Server
python3 scripts/bt-config.py add -n my-server -H https://panel.example.com:8888 -t YOUR_TOKEN
Getting an API Token:
- Log in to aaPanel → Panel Settings → API Interface → Get API Token
- If using a self-signed certificate, add
--verify-ssl false
2. Run a Health Check
python3 scripts/monitor.py --server my-server
python3 scripts/sites.py --server my-server
python3 scripts/services.py --server my-server
3. Browse Server Files
python3 scripts/files.py ls /www
python3 scripts/files.py cat /www/server/nginx/conf/nginx.conf
CLI Commands
Monitoring
python3 scripts/monitor.py # All servers, JSON
python3 scripts/monitor.py --server my-server # Specific server
python3 scripts/monitor.py --format table # Table output
python3 scripts/sites.py --filter ssl-warning # SSL expiring soon
python3 scripts/sites.py --filter stopped # Stopped sites
python3 scripts/services.py # Service status
python3 scripts/services.py --service nginx # Specific service
python3 scripts/ssh.py --logs --filter failed # Failed SSH logins
python3 scripts/ssh.py --status # SSH service status
python3 scripts/logs.py --service nginx --lines 100 # Nginx error log
python3 scripts/logs.py --service mysql # MySQL log
python3 scripts/crontab.py --backup-only # Backup cron jobs
File Operations
python3 scripts/files.py ls /www # Browse directory
python3 scripts/files.py cat /www/config.php # Read file
python3 scripts/files.py edit /www/config.php "new content" # Edit file
python3 scripts/files.py mkdir /www/newdir # Create directory
python3 scripts/files.py touch /www/test.txt # Create file
python3 scripts/files.py rm /www/old.txt # Delete file
python3 scripts/files.py chmod 755 /www/file.txt # Change permissions
python3 scripts/files.py stat /www/file.txt # View permissions
python3 scripts/download.py --url "https://..." # Download file to server
python3 scripts/unzip.py /www/archive.zip # Extract ZIP on server
Config Management
python3 scripts/bt-config.py list # List servers
python3 scripts/bt-config.py add -n s1 -H https://... -t TOKEN # Add server
python3 scripts/bt-config.py remove my-server # Remove server
python3 scripts/bt-config.py threshold --cpu 80 # Set alert thresholds
SSL Certificate Management
python3 scripts/ssl.py list --server my-server # List SSL certificates
python3 scripts/ssl.py info --server my-server --site example.com # Get site SSL info
python3 scripts/ssl.py provision --server my-server --site example.com # Let's Encrypt
python3 scripts/ssl.py renew --server my-server --site example.com # Renew certificate
python3 scripts/ssl.py revoke --server my-server --site example.com # Revoke/disable SSL
Site Management
python3 scripts/sites_mgmt.py list --server my-server # List all sites
python3 scripts/sites_mgmt.py create --server my-server --name example.com --path /www/wwwroot/example.com --php 83 # Create site
python3 scripts/sites_mgmt.py delete --server my-server --name example.com # Delete site
python3 scripts/sites_mgmt.py add-domain --server my-server --site example.com --domain www.example.com # Add domain
python3 scripts/sites_mgmt.py remove-domain --server my-server --site example.com --domain www.example.com # Remove domain
python3 scripts/sites_mgmt.py domains --server my-server --site example.com # List site domains
Database Management
python3 scripts/databases.py list --server my-server # List databases
python3 scripts/databases.py create --server my-server --name mydb --user dbuser --password Secret123 # Create database
python3 scripts/databases.py delete --server my-server --name mydb # Delete database
python3 scripts/databases.py create-user --server my-server --user newuser --password Secret123 # Create user
python3 scripts/databases.py grant --server my-server --user dbuser --db mydb # Grant privileges
Firewall Management
python3 scripts/firewall.py list --server my-server # List firewall rules
python3 scripts/firewall.py status --server my-server # Get firewall status
python3 scripts/firewall.py allow --server my-server --ip 192.168.1.100 # Whitelist IP
python3 scripts/firewall.py deny --server my-server --ip 10.0.0.50 # Blacklist IP
python3 scripts/firewall.py remove --server my-server --ip 10.0.0.50 # Remove IP from list
FTP Account Management
python3 scripts/ftp.py list --server my-server # List FTP accounts
python3 scripts/ftp.py create --server my-server --user ftpuser --password Secret123 --path /www/wwwroot # Create FTP account
python3 scripts/ftp.py delete --server my-server --id 1 # Delete FTP account
python3 scripts/ftp.py set-password --server my-server --id 1 --password NewSecret123 # Set password
PHP Version Management
python3 scripts/php.py list --server my-server # List installed PHP versions
python3 scripts/php.py set --server my-server --site example.com --version 83 # Set PHP version
python3 scripts/php.py get --server my-server --site example.com # Get current PHP version
---
## Alert Configuration
Edit `~/.openclaw/bt-skills.yaml` to set alert thresholds:
```yaml
global:
thresholds:
cpu: 80 # CPU usage alert threshold (%)
memory: 85 # Memory usage alert threshold (%)
disk: 90 # Disk usage alert threshold (%)
SSL Certificate Alert Levels
| Days Remaining | Level |
|---|---|
| Expired | critical |
| ≤ 7 days | critical |
| ≤ 30 days | warning |
Config File
Location: ~/.openclaw/bt-skills.yaml
Contains: Server configs, API tokens, alert thresholds
Server configs and tokens are stored locally in ~/.openclaw/bt-skills.yaml.
Monitoring Metrics
System Resources
CPU usage, cores, model • Memory total/used/free • Disk usage per partition • Network speed/traffic • Load averages • System info (hostname, OS, uptime, panel version)
Site Status Checks
PHP, Java, Node.js, Go, Python, .NET, Proxy, Static HTML — running/stopped/starting, SSL status, process info (PID, memory, CPU), backend health for proxies
Service Status
Nginx, Apache, MySQL, Redis, Memcached, Pure-FTPD, PHP (multi-version), PostgreSQL — with error/slow logs where applicable
File Operations
Browse • Read (with tail) • Edit (with concurrency protection) • Create files/dirs • Delete to recycle bin • chmod/chown with recursive support
Troubleshooting
# Check config
python3 scripts/bt-config.py list
# Test connection
python3 scripts/monitor.py --server my-server
# Check Python environment
python3 scripts/check_env.py
Usage Guidance
This skill appears to be what it claims: a full-featured aaPanel/BT-Panel management toolkit. Before installing, note the following: 1) It requires you to provide aaPanel API tokens (stored in ~/.openclaw/bt-skills.yaml or via BT_CONFIG_PATH) — those tokens grant the skill full control over whatever panels you add (site creation/deletion, file edits, DB and firewall changes), so only add trusted panels and use least-privilege tokens where possible. 2) The package will make network POST requests to the panel hosts; ensure your aaPanel IP whitelist and tokens are configured safely. 3) There is no automated install spec in the registry entry — you must install Python dependencies (requests, pyyaml, rich) yourself; run the code review and run in an isolated environment if unsure. 4) Because the skill can download/unzip files and edit/delete files on the target panels, review the scripts (download.py, unzip.py, files.py) and the README; consider testing on a non-production server first. If you want higher assurance, verify the full source from the referenced repository (github.com/social5h3ll/aapanel-openclaw-skill) and confirm that the copy in the registry matches that repo before supplying tokens.
Capability Analysis
Type: OpenClaw Skill
Name: aapanel-5h3ll
Version: 1.0.5
The skill bundle provides a comprehensive administrative toolkit for managing aaPanel/BT-Panel servers, including full file system access (read, edit, delete), database management, firewall rule manipulation, and SSL certificate provisioning. While these capabilities are aligned with the stated purpose of server monitoring and management, they grant an AI agent extremely broad permissions, including the ability to download and extract arbitrary files (scripts/download.py, scripts/unzip.py) and modify system configurations. Sensitive API tokens are stored in plaintext in the user's home directory (~/.openclaw/bt-skills.yaml). Although no clear evidence of intentional malicious exfiltration or backdoors was found, the high-risk nature of the provided tools and the potential for misuse via prompt injection against the agent warrant a suspicious classification.
Capability Assessment
Purpose & Capability
Name/description match the included code and CLI scripts: monitoring, site/service management, file ops, SSL, DB, firewall, FTP, etc. The code implements an aaPanel API client and file-management client and uses API tokens obtained from aaPanel as expected.
Instruction Scope
SKILL.md instructs running the provided Python scripts and to add aaPanel API tokens via config. The runtime instructions reference only the expected config locations (~/.openclaw/bt-skills.yaml or BT_CONFIG_PATH) and the aaPanel panel endpoints; they do not ask for unrelated system secrets or to exfiltrate data to unknown endpoints.
Install Mechanism
This is instruction-only in the registry (no platform install spec) but bundles many Python scripts. README notes dependencies (requests, pyyaml, rich) but the skill does not declare an automated install step. User must install Python dependencies manually — keep in mind these are third-party libs but commonly used.
Credentials
No unrelated environment variables or cloud credentials are requested. The skill reads/creates a config file in ~/.openclaw/bt-skills.yaml (and respects BT_CONFIG_PATH) to store server entries and tokens — this is necessary for its function and proportionate to its purpose.
Persistence & Privilege
always:false and model invocation is allowed (platform default). The skill stores config under the user's home dir (~/.openclaw); it does not request permanent platform-wide privileges or claim it will modify other skills' configurations.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install aapanel-5h3ll - After installation, invoke the skill by name or use
/aapanel-5h3ll - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.5
- Skill name updated to "aaPanel-Server-Skill".
- One new icon file (x-logo.svg) added.
- Documentation and metadata updated for clarity and consistency.
- Minor internal file changes across scripts and modules.
- No major new features; mostly refinements and corrections.
v0.2.0
Phase 2
Metadata
Frequently Asked Questions
What is aaPanel Server Skill?
aaPanel/BT-Panel server monitoring and file management skill — system resources, site status, service status, SSH logs, cron jobs, log reading, and remote fi... It is an AI Agent Skill for Claude Code / OpenClaw, with 103 downloads so far.
How do I install aaPanel Server Skill?
Run "/install aapanel-5h3ll" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is aaPanel Server Skill free?
Yes, aaPanel Server Skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does aaPanel Server Skill support?
aaPanel Server Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created aaPanel Server Skill?
It is built and maintained by Social5h3ll (@social5h3ll); the current version is v1.0.5.
More Skills