← Back to Skills Marketplace
93
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install teamapp-admin
Description
Use when interacting with TeamApp club admin JSON endpoints on teamapp.com to create/read/update News articles and Schedule events, and to resolve Team and A...
Usage Guidance
This skill appears to implement TeamApp admin operations and includes a shell wrapper that requires your browser's ta_auth_token cookie (TA_AUTH_TOKEN) and likely a TA_CLUB_ID environment variable. Before installing or using it: 1) Verify the publisher/source (there is no homepage listed). 2) Understand that you must supply a live session cookie — treat it like a password: do not share it with untrusted code. 3) Prefer using an account with limited privileges and rotate the cookie after use. 4) Confirm the registry metadata is corrected to list TA_AUTH_TOKEN (and TA_CLUB_ID if required). 5) Optionally review/scan the wrapper script yourself (it is short and only talks to teamapp.com and the user-provided URLs). If you cannot verify the author or are unwilling to provide a session cookie, do not install or use this skill.
Capability Analysis
Type: OpenClaw Skill
Name: teamapp-admin
Version: 1.0.0
The skill bundle provides a functional interface for the TeamApp API but contains significant security vulnerabilities in its credential handling logic. The wrapper script `bin/api-wrapper.sh` accepts an arbitrary URL and automatically attaches the sensitive `TA_AUTH_TOKEN` to the request headers without validating that the destination is a legitimate TeamApp domain, which could lead to credential exfiltration if the agent is manipulated. Additionally, the script stores session cookies and CSRF tokens in world-readable locations (`/tmp/teamapp_cookies.txt`), posing a risk on multi-user systems.
Capability Assessment
Purpose & Capability
The name, SKILL.md, and the included api-map and wrapper script all align with managing TeamApp club admin JSON endpoints (news, events, teams, access groups). However the registry metadata claims no required env vars while the wrapper script and SKILL.md require a sensitive TA_AUTH_TOKEN cookie; examples also reference TA_CLUB_ID which is not declared. The lack of a homepage or known source reduces provenance.
Instruction Scope
Runtime instructions are focused on reading JSON schemas and using the provided wrapper to call TeamApp endpoints; they do not instruct the agent to read arbitrary system files. The wrapper enforces session bootstrapping, CSRF extraction, and cookie management which are reasonable for the stated purpose. However examples reference an undeclared TA_CLUB_ID env var and the instructions insist on injecting a browser cookie value (TA_AUTH_TOKEN), a sensitive credential.
Install Mechanism
There is no install spec (instruction-only with one shell wrapper file). Nothing is downloaded or installed by the skill, which keeps install risk low.
Credentials
The script requires TA_AUTH_TOKEN (the ta_auth_token cookie) — a sensitive credential appropriate for web session actions, but the registry metadata falsely lists no required env vars. Examples also use TA_CLUB_ID but it is not declared. Requesting a live session cookie is proportionate to the capability but the metadata/instructions mismatch and lack of provenance are concerning.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide configs, and only writes temporary files under /tmp for cookies/CSRF. Autonomy is allowed (default) but that is normal for skills.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install teamapp-admin - After installation, invoke the skill by name or use
/teamapp-admin - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the teamapp-admin-api skill.
- Enables interaction with TeamApp club admin JSON endpoints to manage News articles and Schedule events.
- Supports ID resolution workflows for teams and access groups.
- Requires all API requests to be routed through the provided bash wrapper for authentication/session management.
- Provides examples and reference for required payload fields and notification controls.
- Documentation links key endpoint and schema resources for reliable usage.
Metadata
Frequently Asked Questions
What is TeamApp Admin?
Use when interacting with TeamApp club admin JSON endpoints on teamapp.com to create/read/update News articles and Schedule events, and to resolve Team and A... It is an AI Agent Skill for Claude Code / OpenClaw, with 93 downloads so far.
How do I install TeamApp Admin?
Run "/install teamapp-admin" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is TeamApp Admin free?
Yes, TeamApp Admin is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does TeamApp Admin support?
TeamApp Admin is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created TeamApp Admin?
It is built and maintained by Steve G (@thed000d); the current version is v1.0.0.
More Skills