← Back to Skills Marketplace
3069
Downloads
3
Stars
31
Active Installs
2
Versions
Install in OpenClaw
/install dashboard
Description
Build custom dashboards from any data source with local hosting and visual QA loops.
Usage Guidance
Before installing, understand that dashboards may touch sensitive APIs or local data if you configure them that way. Review every generated fetch script before running it, keep credentials in environment variables rather than files, prefer read-only API keys, avoid unnecessary PII, protect ~/dashboard, and add authentication before exposing any dashboard beyond localhost.
Capability Analysis
Type: OpenClaw Skill
Name: dashboard
Version: 1.0.1
The skill instructs the AI agent to generate shell scripts (`fetch.sh`) that utilize `curl` for network requests and `jq` for data processing, writing output to local files. While the provided example targets a legitimate API (`api.stripe.com`) and the skill explicitly states security boundaries (credentials via environment variables, user-driven execution, local hosting), the capability to generate arbitrary shell commands based on user input (as described in SKILL.md) presents a significant prompt injection vulnerability. A malicious user could potentially craft prompts to trick the agent into generating scripts that perform unauthorized data exfiltration or arbitrary command execution, leveraging the `curl` and file write capabilities.
Capability Assessment
Purpose & Capability
The stated purpose is to generate local static dashboards and optional fetch scripts; the artifacts match that purpose, though the supported data sources can include sensitive business, infrastructure, financial, IoT, and creator metrics.
Instruction Scope
The skill repeatedly describes a user-driven model: users choose sources, provide API credentials through environment variables, and run generated scripts manually or through their own cron setup.
Install Mechanism
The package contains only Markdown guidance files, with no executable code, install hooks, hidden scripts, or declared privileged setup behavior.
Credentials
Use of curl, jq, API endpoints, and local JSON files is proportionate for dashboard data collection, but users should review generated scripts and use narrow, read-only credentials where possible.
Persistence & Privilege
The skill discloses storage under ~/dashboard and optional user-managed cron execution; it does not request elevated privileges or create hidden background persistence.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install dashboard - After installation, invoke the skill by name or use
/dashboard - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
User-driven data source model, explicit credential handling
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Dashboard?
Build custom dashboards from any data source with local hosting and visual QA loops. It is an AI Agent Skill for Claude Code / OpenClaw, with 3069 downloads so far.
How do I install Dashboard?
Run "/install dashboard" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Dashboard free?
Yes, Dashboard is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Dashboard support?
Dashboard is cross-platform and runs anywhere OpenClaw / Claude Code is available (linux, darwin, win32).
Who created Dashboard?
It is built and maintained by Iván (@ivangdavila); the current version is v1.0.1.
More Skills