← Back to Skills Marketplace
224
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install oskill-proxy
Description
Android组件调用代理。通过本地HTTP API在Android设备上启动Activity、启动Service、发送Broadcast、操作ContentProvider。当你无法直接执行Android Intent或组件调用时（例如在Termux环境中），使用此工具完成调用。
Usage Guidance
This skill is coherent with its stated purpose (controlling Android components via a local HTTP proxy) but exercise caution before installing: 1) The SKILL.md contains a hard-coded token and the skill metadata does not declare required credentials — treat that token as potentially sensitive and avoid using default tokens. 2) The proxy can read and modify ContentProviders and start components—these are powerful, privacy-sensitive actions; only enable the skill on devices and apps you trust. 3) Verify the OSkillProxy app's origin (APK/package) and confirm the token and baseUrl from the actual app UI rather than relying on embedded defaults. 4) If you proceed, restrict network access to localhost, rotate/replace the token, and limit the agent's permission to call these endpoints unless absolutely necessary.
Capability Analysis
Type: OpenClaw Skill
Name: oskill-proxy
Version: 1.0.0
The skill provides a high-privilege proxy interface to interact with Android system components (Activities, Services, Broadcasts, and ContentProviders) via a local HTTP API at 127.0.0.1:8726. While these capabilities are aligned with the stated purpose of system automation, they grant the agent broad access to sensitive data and system functions, including the ability to query and modify arbitrary ContentProviders. Additionally, the SKILL.md file contains a hardcoded authentication token (43b618ce5f3a46c78fbde7e6eb6bcac3), which is a security vulnerability.
Capability Assessment
Purpose & Capability
The name/description and SKILL.md consistently describe a local HTTP proxy for invoking Android components (Activity, Service, Broadcast, ContentProvider). There are no unrelated binaries or unrelated environment variables requested. However the skill's source/homepage is unknown which reduces trust in the provider.
Instruction Scope
Runtime instructions direct the agent to POST JSON to a local HTTP API (127.0.0.1:8726) to perform powerful actions (start activities/services, send broadcasts, read/modify ContentProviders). These actions are consistent with the declared purpose but are highly privileged on-device operations. The SKILL.md also embeds a config block with a token and baseUrl: the skill requires an Authorization header but the token is not declared in the registry metadata — this inconsistency and the inclusion of a hard-coded token are concerning.
Install Mechanism
Instruction-only skill with no install spec or code files; no downloads or on-disk installs are declared (lower install risk).
Credentials
No environment variables or credentials are declared, yet the API requires an Authorization: Bearer <token>. The SKILL.md includes a hard-coded token in its config section which is not represented in requires.env. The skill's operations can access sensitive device data (ContentProviders) and perform state-changing actions; the lack of explicit, proportionate credential declarations and the embedded token are red flags.
Persistence & Privilege
always is false, no requests to modify other skills or global agent settings. The skill can be invoked autonomously (normal default) but it does not request permanent inclusion or system-wide config changes.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install oskill-proxy - After installation, invoke the skill by name or use
/oskill-proxy - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of oskill-proxy — a local HTTP API proxy for Android component invocation.
- Provides endpoints to start Activity, Service, send Broadcasts, and operate on ContentProvider via HTTP.
- Supports both explicit and implicit Intents, extras with typed or auto-inferred parameters, and standard Android flags.
- API includes endpoints for querying, inserting, updating, deleting, and calling methods on ContentProviders.
- All actions require Bearer token authentication (except service status check).
- Includes detailed error codes and example requests for easy integration.
- GET /api/v1/status endpoint allows checking if the proxy service is up (no token required).
Metadata
Frequently Asked Questions
What is Oskill Proxy?
Android组件调用代理。通过本地HTTP API在Android设备上启动Activity、启动Service、发送Broadcast、操作ContentProvider。当你无法直接执行Android Intent或组件调用时（例如在Termux环境中），使用此工具完成调用。 It is an AI Agent Skill for Claude Code / OpenClaw, with 224 downloads so far.
How do I install Oskill Proxy?
Run "/install oskill-proxy" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Oskill Proxy free?
Yes, Oskill Proxy is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Oskill Proxy support?
Oskill Proxy is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Oskill Proxy?
It is built and maintained by SOSO-eng (@soso-eng); the current version is v1.0.0.
More Skills