← Back to Skills Marketplace
hamibot

Hamibot

by Hamibot · GitHub ↗ · v1.0.4 · MIT-0
cross-platform ✓ Security Clean
187
Downloads
1
Stars
0
Active Installs
5
Versions
Install in OpenClaw
/install hamibot
Description
This skill should be used when working on the Hamibot CLI project — an open-source Node.js command-line tool for authorized remote Android automation. Device...
README (SKILL.md)

\r \r

Hamibot CLI\r

\r Remote Android automation command-line tool. Connect to the Hamibot cloud API to control Android devices:\r execute JavaScript code, manage files, simulate touch input, capture screenshots, launch apps, and query device info.\r \r Official site: https://hamibot.com\r Repository: https://github.com/hamibot/cli\r \r

Security Model\r

\r Hamibot CLI is a legitimate remote automation tool with the following security properties:\r \r

  1. User-Authorized Device Access Only. Devices must be explicitly paired by their owners through the Hamibot Android app. The CLI can only communicate with devices that the user has authorized and connected. There is no mechanism for unauthorized or stealth device access.\r \r
  2. Authenticated API. Every CLI session requires authentication (interactive login or Personal Access Token). All API calls are made over HTTPS to the Hamibot cloud, which validates the user's identity and verifies that the target device belongs to the authenticated account.\r \r
  3. Scoped to User's Own Devices. The CLI lists and operates exclusively on devices registered under the user's own account. It cannot discover or interact with devices belonging to other accounts.\r \r
  4. Standard Automation Capabilities. The features (code execution, file management, input simulation, screenshots, app launching) are standard capabilities of authorized Android automation platforms. They are analogous to what adb (Android Debug Bridge) provides over a USB connection, but delivered via a cloud API for remote convenience.\r \r
  5. Open Source. The CLI is fully open source at https://github.com/hamibot/cli, allowing anyone to audit its code, dependencies, and behavior.\r \r In summary: Hamibot CLI is not a remote access trojan or unauthorized surveillance tool. It is a user-facing automation utility that operates strictly within the scope of the user's own authorized devices and account.\r \r

Installation\r

\r

Prerequisites\r

\r

  • Node.js >= 18 — check with node --version; install from https://nodejs.org/ (LTS recommended) or via nvm / fnm\r
  • npm (bundled with Node.js)\r \r

Install as Global CLI\r

\r

npm install -g hamibot/cli\r
hamibot -v\r
```\r
\r
### Install from Source\r
\r
```bash\r
git clone https://github.com/hamibot/cli.git\r
cd cli\r
npm install\r
npm link\r
```\r
\r
## Quick Start\r
\r
```bash\r
# 1. Login (interactive prompt for phone/email + password)\r
hamibot login\r
\r
# 2. List paired devices\r
hamibot devices\r
\r
# 3. Execute code on device\r
hamibot exec -c 'toast("Hello from CLI!")'\r
```\r
\r
## Authentication\r
\r
### Interactive Login\r
\r
```bash\r
hamibot login\r
```\r
\r
### Token Login (recommended for CI/CD)\r
\r
1. Create a Personal Access Token at https://hamibot.com/account/tokens\r
2. Login with the token:\r
\r
```bash\r
hamibot login -t hmp_xxxxxxxxxxxx\r
```\r
\r
## Global Options\r
\r
Available on all commands:\r
\r
| Flag | Purpose |\r
|------|---------|\r
| `-d, --device \x3Cid>` | Target device ID (repeatable for multi-device parallel) |\r
| `-j, --json` | Structured JSON output for piping and scripting |\r
| `--debug [namespace]` | Debug logging with optional namespace filter |\r
\r
### Device Selection\r
\r
Without `-d`, CLI auto-selects a device:\r
1. If a default device is configured → use it\r
2. If only one device paired → auto-select\r
3. Multiple devices → interactive prompt (enter `0` to select all)\r
\r
### Multi-Device Parallel\r
\r
```bash\r
hamibot input tap 500 500 -d device-A -d device-B\r
```\r
\r
## Commands Reference\r
\r
### Code Execution\r
\r
```bash\r
hamibot exec -c 'toast("Hello!")'\r
hamibot exec -f ./script.js\r
echo 'toast("Hello!")' | hamibot exec\r
```\r
\r
### File Management\r
\r
```bash\r
hamibot file ls                          # List /sdcard\r
hamibot file ls /sdcard/Download\r
hamibot file download /sdcard/file.png    # Download to current dir\r
hamibot file download /sdcard/file.png ./local.png\r
hamibot file upload ./local.txt /sdcard/\r
hamibot file cat /sdcard/log.txt\r
```\r
\r
### Input Control\r
\r
```bash\r
hamibot input tap 500 500\r
hamibot input click 500 500              # alias\r
hamibot input longtap 500 500\r
hamibot input longtap 500 500 --duration 1000\r
hamibot input swipe 500 1500 500 500 --duration 300\r
hamibot input gesture 500 100 200 300 400 500 600 700\r
```\r
\r
### Launch App\r
\r
```bash\r
hamibot launch com.example.app\r
hamibot launch com.example.app --activity .MainActivity\r
```\r
\r
### Device Management\r
\r
```bash\r
hamibot devices                          # List all devices\r
hamibot devices info \x3CdeviceId>\r
hamibot devices online                   # Check online status\r
```\r
\r
### Run Saved Script\r
\r
```bash\r
hamibot run \x3CscriptId>\r
```\r
\r
### Configuration\r
\r
```bash\r
hamibot config defaultDevice \x3Cid>        # Set default device\r
hamibot config defaultDevice --get       # Get config value\r
hamibot config --reset                   # Clear all config\r
```\r
Usage Guidance
This skill is coherent with its stated purpose, but take standard precautions before installing a global CLI: verify the upstream repository (https://github.com/hamibot/cli) and homepage, inspect package.json for any postinstall scripts or unexpected dependencies, prefer installing in a sandbox/container if you want to reduce risk, create Personal Access Tokens with minimum scope and rotate them if exposed, and ensure you only pair devices you control or that their owners have explicitly authorized. If you plan to use this in CI, store tokens securely (CI secret store) rather than embedding them in scripts or public places.
Capability Analysis
Type: OpenClaw Skill Name: hamibot Version: 1.0.4 The skill bundle provides an interface for the Hamibot CLI, a legitimate remote Android automation tool. While the tool possesses high-privilege capabilities such as remote file management, code execution, and input simulation on connected Android devices, these are clearly aligned with its stated purpose and require explicit user authentication and device pairing. The documentation in SKILL.md includes a transparent security model, and no evidence of data exfiltration, obfuscation, or malicious prompt injection was found.
Capability Assessment
Purpose & Capability
The skill is named and described as a helper for the Hamibot CLI and its SKILL.md only requires the 'hamibot' binary and documents installing and using the CLI. Nothing requested (no unrelated env vars, credentials, or config paths) is out of scope for a CLI integration.
Instruction Scope
Runtime instructions are limited to installing the CLI, authenticating (interactive or token), and running hamibot commands (devices, exec, file, input, etc.). The instructions do not direct the agent to read unrelated files, harvest environment variables, or transmit data to unexpected endpoints.
Install Mechanism
There is no automatic install spec in the registry (skill is instruction-only). The SKILL.md recommends npm install -g hamibot/cli (GitHub package) or building from the GitHub repo. This is a standard install route, but npm packages (and installs from GitHub) can include postinstall scripts and arbitrary Node code, so users should review the package/repo before a global install.
Credentials
The skill does not request any environment variables or secrets. The CLI supports Personal Access Tokens (sensitive) for noninteractive login, which is expected for this tool; the skill does not ask for tokens itself. Users should treat tokens as sensitive and only supply them to trusted tooling.
Persistence & Privilege
The skill does not request always:true or any elevated platform privileges. The only persistence implied is installing a global CLI (npm -g or npm link) and the CLI's own config (defaultDevice, tokens) which is normal for a command-line tool.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install hamibot
  3. After installation, invoke the skill by name or use /hamibot
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.4
- Clarified security and authorization in the description and documentation. - Added a new "Security Model" section detailing device pairing, authentication, user/device scoping, openness, and intended usage. - Emphasized that all device access requires explicit user authorization and only applies to the user's own account and paired devices. - No changes to commands, options, or usage instructions.
v1.0.3
No changes detected in this release.
v1.0.2
- Updated skill documentation to provide a simplified, user-focused overview. - Added metadata for improved integration and installation guidance. - Restructured the SKILL.md: separated installation, authentication, and command usage for clarity. - Expanded and clarified command reference examples for easier onboarding. - Removed detailed internal architecture and development information in favor of concise usage and setup instructions.
v1.0.1
**Expanded documentation and project info** - Skill renamed from "hamibot-cli" to "hamibot" - Adds detailed installation and development instructions, including environment prerequisites, global and local install, and standalone executable build - Documents official resources: website and repository links - Enhances quick start instructions and usage examples - Clarifies CI/CD environment variable usage - No functional code or architectural changes detected
v1.0.0
hamibot-cli 1.0.0 — Initial release - Introduces the Hamibot CLI development skill, a Node.js command-line tool for remote Android automation. - Supports command development, debugging, extending commands, SEA builds, and explores project structure and architecture patterns. - Provides detailed documentation on global options, command/action flow, device selection, error handling, and API layer usage. - Includes guidelines for adding new commands and understanding SEA (Single Executable Application) build process. - Documents environment variables, MSYS2/Git Bash path fixes, config storage, and multi-device execution patterns.
Metadata
Slug hamibot
Version 1.0.4
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 5
Frequently Asked Questions

What is Hamibot?

This skill should be used when working on the Hamibot CLI project — an open-source Node.js command-line tool for authorized remote Android automation. Device... It is an AI Agent Skill for Claude Code / OpenClaw, with 187 downloads so far.

How do I install Hamibot?

Run "/install hamibot" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Hamibot free?

Yes, Hamibot is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Hamibot support?

Hamibot is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Hamibot?

It is built and maintained by Hamibot (@hamibot); the current version is v1.0.4.

💬 Comments