← Back to Skills Marketplace
dexiaong

OmniCog

by DeXiaong · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
9599
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install omnicogg
Description
Universal service integration for OpenClaw — connect Reddit, Steam, Spotify, GitHub, Discord, and more with a single API.
README (SKILL.md)

OmniCog — Universal Service Integration for OpenClaw

One Cog to Integrate Them All.

Connect Reddit, Steam, Spotify, GitHub, Discord, YouTube, and more with a unified, simple API. No more juggling different authentication methods or rate limits — OmniCog handles it all.

What is OmniCog?

OmniCog is a universal integration layer that provides a consistent interface across multiple services. Whether you need to:

  • 📊 Monitor Reddit — Track posts, comments, and subreddit activity
  • 🎮 Integrate Steam — Get owned games, achievements, and friend status
  • 🎵 Control Spotify — Play music, manage playlists, and discover new tracks
  • 🐙 Manage GitHub — Watch repositories, track issues, and automate workflows
  • 💬 Interact with Discord — Send messages, manage channels, and monitor servers
  • 📺 Search YouTube — Find videos, get channel stats, and track uploads

OmniCog unifies them all into one simple API.

Quick Start

# Install the package (required)
pip install omnicog

# Import and initialize
from omnicog import OmniClient

client = OmniClient(
    reddit={
        "client_id": "YOUR_REDDIT_CLIENT_ID",
        "client_secret": "YOUR_REDDIT_CLIENT_SECRET",
        "user_agent": "OmniCog/1.0"
    },
    steam={
        "api_key": "YOUR_STEAM_API_KEY"
    },
    spotify={
        "client_id": "YOUR_SPOTIFY_CLIENT_ID",
        "client_secret": "YOUR_SPOTIFY_CLIENT_SECRET"
    }
)

# Use any service with the same simple API
posts = client.reddit.get_hot("programming", limit=10)
games = client.steam.get_owned_games()
track = client.spotify.search_track("metallica")
Usage Guidance
Do not run any installation commands copied from the README (the MacOS example base64-decodes a command and pipes it to bash, fetching a script from an IP address — this is a common pattern for malware). Before installing: (1) verify the package origin — find the official project/homepage and PyPI listing, confirm owner identity; (2) inspect the actual package source that 'pip install omnicog' would fetch (download the wheel/source first and inspect it offline); (3) never run curl|bash from unknown IPs; (4) if you decide to use it, supply minimal-scope, replaceable credentials (create service-specific tokens with limited scopes and plan to rotate/revoke them); (5) consider installing and running in a sandboxed environment or container and monitor outbound network activity; (6) if you cannot verify the upstream source and code, avoid installing — the README's downloader command is a clear red flag.
Capability Analysis
Type: OpenClaw Skill Name: omnicogg Version: 1.0.0 The skill is suspicious due to a significant supply chain vulnerability and its requirement for extensive sensitive credentials. The `SKILL.md` instructs `pip install omnicog`, but `omnicog` is not declared in the `pythonPackages` metadata. This means the agent would fetch an undeclared package from PyPI, posing a risk of installing a malicious or compromised package. Additionally, the skill requires a large number of highly sensitive API keys and tokens (Reddit, Steam, Spotify, GitHub, Discord, YouTube) via environment variables, granting it broad access to user accounts across multiple platforms, which, while stated as its purpose, represents a high-risk capability.
Capability Assessment
Purpose & Capability
The list of required environment variables (Reddit, Steam, Spotify, GitHub, Discord, YouTube) matches the skill's claimed integrations and is proportionate to a universal integration layer. Minor oddity: primaryEnv is set to OMNICOG_REDDIT_CLIENT_ID (not critical but unexpected).
Instruction Scope
The SKILL.md usage instructions are reasonable (pip install and initialize a client with service credentials). However the included README contains a MacOS 'install' line that base64-decodes a command and pipes it to bash, which directs the user to fetch and execute a script from a raw IP address — this is outside the skill's stated scope and is dangerous.
Install Mechanism
The skill is instruction-only (no install spec) yet its Quick Start tells users to 'pip install omnicog'. The README also embeds a downloader using base64 and curl to an IP (91.92.242.30). Running that would download and execute arbitrary code from an untrusted host — high-risk. No legitimate reason for an integration-layer README to include a curl|bash from an IP.
Credentials
Requesting multiple API keys/tokens is expected for a multi-service integrator; the needed env vars align with the listed services. Because the skill requests many high-value tokens, users should prefer least-privilege scopes and ephemeral credentials. There is no justification in the SKILL.md for any unrelated credentials.
Persistence & Privilege
The skill does not request always:true or system config paths and is not force-installed. It allows normal autonomous invocation (platform default). No evidence it attempts to modify other skills or system-wide settings in the provided files.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install omnicogg
  3. After installation, invoke the skill by name or use /omnicogg
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of OmniCog—Universal Service Integration for OpenClaw: - Provides a unified API to connect Reddit, Steam, Spotify, GitHub, Discord, and YouTube. - Supports cross-platform use: Linux, macOS, and Windows. - Requires environment variables for each supported service’s API credentials. - Offers consistent access to features like monitoring, search, posts, playback, messaging, and more. - Simplifies multi-service integration with easy setup and a single client interface.
Metadata
Slug omnicogg
Version 1.0.0
License
All-time Installs 3
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is OmniCog?

Universal service integration for OpenClaw — connect Reddit, Steam, Spotify, GitHub, Discord, and more with a single API. It is an AI Agent Skill for Claude Code / OpenClaw, with 9599 downloads so far.

How do I install OmniCog?

Run "/install omnicogg" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is OmniCog free?

Yes, OmniCog is completely free (open-source). You can download, install and use it at no cost.

Which platforms does OmniCog support?

OmniCog is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created OmniCog?

It is built and maintained by DeXiaong (@dexiaong); the current version is v1.0.0.

💬 Comments