← Back to Skills Marketplace
500
Downloads
0
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install pcclaw
Description
PCClaw provides 16 native Windows AI skills for system control, automation, files, notifications, OCR, speech, LLM inference, and task management with minima...
Usage Guidance
This package mostly does what it says: many skills intentionally read local Windows data (Sticky Notes DB, browser bookmarks/history, filesystem, task scheduler) and call local LLMs (Ollama) or OAuth flows for cloud task services. The main red flags are the recommended one-liner installer (irm openclaw.irisgo.xyz/i | iex) — piping remote PowerShell into iex executes unreviewed code — and the installer’s automatic Moltbook registration/posting behaviour (network activity you may not expect). Before installing: 1) Do not run the one-liner unless you trust and have inspected the remote script. 2) Prefer manual install: download the repository and inspect install.ps1/i script contents. 3) Verify what the installer will send to external services (Moltbook) and whether API keys or other data are transmitted. 4) If you are privacy-conscious, run in an isolated VM or test machine first. 5) Review and back up any local data (browser profiles, Sticky Notes DB) before allowing tools that read them. If you want help reviewing the remote installer script (openclaw.irisgo.xyz/i) or the specific installer steps, provide the script and I can analyze it for unexpected network calls or data exfiltration.
Capability Analysis
Type: OpenClaw Skill
Name: pcclaw
Version: 2.0.0
The OpenClaw AgentSkills bundle provides extensive Windows system interaction capabilities, which is its stated purpose. However, a pervasive lack of input sanitization across multiple skills (e.g., `win-files`, `win-scheduler`, `win-ui-auto`, `winget`, `win-browser`, `sticky-notes`, `win-sysinfo`, `win-clipboard`, `win-ocr`, `win-screenshot`, `win-tts`, `win-whisper`) leads to severe vulnerabilities. These include multiple instances of shell injection (allowing arbitrary command execution, RCE, and persistence via `win-scheduler` and `win-ui-auto`), SQL injection (`sticky-notes`, `win-browser`), arbitrary file read/write/delete, process termination, and environment variable disclosure. While there is no clear evidence of intentional malicious behavior (e.g., self-exfiltration of data), the widespread vulnerabilities make the skill bundle highly exploitable through prompt injection against the AI agent, allowing an attacker to leverage the agent's capabilities for harmful actions on the host system.
Capability Assessment
Purpose & Capability
The set of per-skill instructions (win-clipboard, win-screenshot, win-ocr, win-browser, sticky-notes, win-files, win-ai-local, etc.) align with the name/description: they use Win32/.NET/WMI/WinRT and local tools to inspect and control a Windows system. Cross-platform skills (ms-todo, google-tasks) appropriately document OAuth flows or CLI backends.
Instruction Scope
Most SKILL.md files stay within expected scope (reading Sticky Notes DB, browser bookmarks/history, invoking Ollama locally, managing Task Scheduler). However the top-level README/SKILL.md instructs running a remote installer that 'Registers on Moltbook — Creates your AI agent profile and posts first message' and 'Configures your LLM' — network activity and automatic account creation/posting are scope creep relative to a purely-local skills bundle and may transmit metadata or create external traces. Several skills read sensitive local data (browser history, bookmarks, sticky notes) — this is coherent with purpose but privacy-sensitive and should be explicit to users.
Install Mechanism
There is no formal install spec in the registry, but the README strongly recommends running a one-liner: irm openclaw.irisgo.xyz/i | iex. Piping a remote PowerShell script to iex downloads and executes arbitrary remote code; the script is not included here for inspection. That pattern is high-risk because it gives the remote host immediate code-execution capability on the user's machine. A manual installation alternative is shown, which is safer if the user inspects files first.
Credentials
Top-level metadata lists no required env vars, which matches the registry. Individual skill docs correctly document per-skill requirements (e.g., ms-todo requires MS_TODO_CLIENT_ID and MS_TODO_REFRESH_TOKEN; google-tasks documents OAuth client_id/secret or gog CLI). These per-skill credentials are appropriate for their functions. The README's BYOK claim ('We never collect or transmit it') is a positive statement but cannot be verified from the instruction-only content; the installer’s Moltbook registration and 'Configure your LLM' steps raise the possibility of network-transmitted metadata or tokens if the installer script does so.
Persistence & Privilege
always: false (no forced permanent inclusion). The README/installer will install system-wide components if used (Node.js, npm global openclaw@latest, copy skills into %USERPROFILE%\.openclaw, create %USERPROFILE%\.config\moltbook\credentials.json). That means the installer can create persistent files and register external accounts, but the skill bundle itself (as published here) does not request elevated privileges or an always-on presence. Users should expect the installer to modify their system and create stored credentials if they run it.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pcclaw - After installation, invoke the skill by name or use
/pcclaw - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.0
14 Windows-native skills + 2 cross-platform + one-command installer
Metadata
Frequently Asked Questions
What is PCClaw?
PCClaw provides 16 native Windows AI skills for system control, automation, files, notifications, OCR, speech, LLM inference, and task management with minima... It is an AI Agent Skill for Claude Code / OpenClaw, with 500 downloads so far.
How do I install PCClaw?
Run "/install pcclaw" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is PCClaw free?
Yes, PCClaw is completely free (open-source). You can download, install and use it at no cost.
Which platforms does PCClaw support?
PCClaw is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created PCClaw?
It is built and maintained by lmanchu (@lmanchu); the current version is v2.0.0.
More Skills