← Back to Skills Marketplace

WebClaw

Name: WebClaw
Author: mailnike

by Nikhil Jathar · GitHub ↗ · v2.1.3 · MIT-0

linux ✓ Security Clean

939

Downloads

Stars

Active Installs

Versions

Install in OpenClaw

/install webclaw

Description

Web dashboard for OpenClaw. Browser-based UI for any installed skill. Schema-driven rendering, JWT auth, RBAC, AI chat, real-time updates. Install web dashbo...

Usage Guidance

This skill appears to do what it says: install and manage a local web dashboard. Before installing, consider: 1) It requires sudo and will modify /etc/nginx, systemd services, and create files under your home directory — run on a server or VM you control, not a sensitive host. 2) The installer clones and executes code from GitHub at tag v2.1.0 (pip/npm install and an optional init_webclaw_db.py imported at runtime) — verify the GitHub repo and release tag if you need stronger assurance. 3) The skill will run certbot and expects a domain pointing to the server for Let's Encrypt; otherwise it installs a self-signed cert. 4) No external API keys or secrets are requested by the skill, but its actions run privileged system commands via sudo; review templates (nginx/systemd) and init scripts if you require stricter auditing. Recommended: test installation in an isolated environment (VM/container), inspect the referenced release tag on GitHub, and back up any existing nginx/systemd configs before proceeding.

Capability Analysis

Type: OpenClaw Skill Name: webclaw Version: 2.1.3 The webclaw skill bundle is a legitimate infrastructure component designed to provide a web-based UI for OpenClaw. It utilizes a standard web stack (FastAPI, Next.js, Nginx) and requires elevated privileges (sudo) to configure system services and SSL via Certbot, which is consistent with its stated purpose. The code follows security best practices, including regex-based domain validation in `scripts/db_query.py` to prevent injection, secure password hashing (PBKDF2), and parameterized database queries. While it fetches source code from a GitHub repository during installation, this is transparently documented and pinned to a specific release tag (v2.1.0).

Capability Assessment

✓ Purpose & Capability

Name/description (web dashboard, JWT, RBAC, SSL) match the code and scripts: install.sh, db_query.py, and check_deps.sh all implement installing a web app, building frontend/backend, configuring nginx, systemd, and SSL. Required binaries (python3, node, npm, nginx, certbot, git, sudo) are reasonable and expected for this functionality.

ℹ Instruction Scope

SKILL.md and scripts instruct the agent to clone the project from GitHub, create a venv, pip/npm install and build, initialize a local SQLite DB, write nginx configs, and create systemd services. These steps read/write system paths (e.g., /etc/nginx, /etc/systemd, ~/.openclaw/webclaw) and run commands via sudo — expected for an installer, but they grant the skill the ability to modify system network and service configuration. The db init path may execute an init_webclaw_db.py module from the cloned source (importlib.exec_module), so code pulled from GitHub runs during initialization; this is coherent but worth reviewing before install.

ℹ Install Mechanism

This is an instruction-only skill (no formal install spec), but scripts perform network operations: git clone from GitHub (pinned tag v2.1.0), pip install (requirements.txt), and npm build. Using GitHub releases/tag is reasonable and traceable; no obscure download URLs or extract-from-arbitrary-URL patterns were observed. The script runs system-level changes (nginx/sites-enabled, /etc/ssl, systemd) which is expected for a web-service installer.

✓ Credentials

No required environment variables or credentials are declared; only an optional WEBCLAW_DOMAIN is referenced. The binary and privilege requirements (sudo, certbot) align with the need to manage TLS and system services. No unrelated cloud credentials or secrets are requested.

ℹ Persistence & Privilege

The installer creates persistent systemd services and nginx configs and writes a local SQLite DB — behavior consistent with installing a long-running web dashboard. always:false (not force-installed) and normal model invocation mean the skill is not automatically forced into every agent run. However, the skill requires sudo during install and uses sudo in runtime actions (certbot, nginx reload, systemctl), so installing or invoking its actions will perform privileged changes.

How to Use

Make sure OpenClaw is installed (local or Docker)
Run the install command in chat: /install webclaw
After installation, invoke the skill by name or use /webclaw
Provide required inputs per the skill's parameter spec and get structured output

Version History

v2.1.3

- Added support for setting a specific password during the "reset-password" action (`--password` argument). - Documentation updated to show that "reset-password" can now accept a custom password in addition to generating a random one. - Updated installation instructions to clone the application code from GitHub at release tag `v2.1.0` (was `v1.0.10` previously).

v2.1.2

- Added ERP company setup notes to clarify that all company/demo data setup is handled via the erpclaw skill, not webclaw. - Provided step-by-step instructions for initializing and setting up a company with erpclaw. - Warned against directly importing webclaw Python modules; advised use of service actions or API instead. - No core functionality or action changes to webclaw itself.

v2.1.1

- Added CONTRIBUTING.md and LICENSE.txt files to the project. - Updated installation instructions to reference application code from GitHub at release tag v1.0.10 (was v2.0.0). - No functional or API changes in this version.

v2.1.0

Bug fixes, v2 sync

v1.0.16

2.0.0 is a major release with an updated, pinned application source version. - Application code source updated to release tag v2.0.0 (previously v1.0.10) - No changes to commands, features, or documentation content - Recommended for all users to receive latest updates and fixes

v1.0.15

No user-visible changes in this release. - Version bumped to 1.0.15; no file changes detected. - All features and documentation remain unchanged from the previous release.

v1.0.14

No user-visible changes in this release. - Version bump from 1.0.11 to 1.0.14 - No updates to content, features, or documentation detected

v1.0.13

- Supply chain and install process clarified: application now clones from a specific tagged release (v1.0.10) on GitHub, not HEAD. - pip and npm dependencies are explicitly installed from standard registries in an isolated virtual environment. - Temporary passwords created by `create-user` and `reset-password` actions are output to the bot for secure relay and must be changed at first login. - Metadata updated to allow `WEBCLAW_DOMAIN` as an optional environment variable for customization.

v1.0.12

- Updated setup instructions: now explicitly tell users to open https://YOUR_SERVER/setup to create their admin account after installation. - Clarified initial setup steps and made the setup process more prominent for first-time users. - No code or functionality changes; documentation update only.

v1.0.11

v1.0.10

**Note:** No source code changes, only documentation updated. - Clarified in SKILL.md that the ClawHub package contains only metadata and scripts; the full application is cloned from GitHub post-install. - Added note that git and internet access are required on the target server for the full install. - No changes to commands, features, or configuration.

v1.0.9

v1.0.8

No changes were detected in this release. - Version bumped from 1.0.5 to 1.0.8 with no file or documentation updates. - No new features, bug fixes, or enhancements introduced in this version.

v1.0.7

No file changes detected between versions 1.0.5 and 1.0.7. - No updates or modifications found in this release. - All features and documentation remain unchanged.

v1.0.6

No changes detected in this release. - Version number updated to 1.0.6; all other content remains unchanged from the previous release.

v1.0.5

webclaw 1.0.5 is a version bump with no code or SKILL.md content changes. - Version updated from 1.0.3 to 1.0.5. - No functional, documentation, or file changes detected.

v1.0.4

- Updated homepage URL to https://www.erpclaw.ai. - Added "git" and "sudo" as installation requirements in the metadata. - Clarified that installation requires sudo for nginx, systemd, certbot, and git operations. - Noted that the source repo is cloned from GitHub on first install. - Version updated to 1.0.3.

v1.0.3

- Major cleanup: removed 103 files related to backend, frontend, and configuration. - No functional or interface changes described in documentation. - Likely transition to minimal or placeholder state for the skill.

v1.0.2

Full publish with API, frontend, templates, and install scripts

v1.0.1

- Major update: All source files have been removed from the repository in this version. - 104 files deleted, including backend (API, database, auth), frontend (web assets, configs), middleware, and supporting scripts. - No changes to the SKILL.md documentation or public interface description. - This update effectively makes the skill non-functional by removing its implementation code.

Metadata

Slug webclaw

Version 2.1.3

License MIT-0

All-time Installs 4

Active Installs 4

Total Versions 21

Frequently Asked Questions

What is WebClaw?

Web dashboard for OpenClaw. Browser-based UI for any installed skill. Schema-driven rendering, JWT auth, RBAC, AI chat, real-time updates. Install web dashbo... It is an AI Agent Skill for Claude Code / OpenClaw, with 939 downloads so far.

How do I install WebClaw?

Run "/install webclaw" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is WebClaw free?

Yes, WebClaw is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does WebClaw support?

WebClaw is cross-platform and runs anywhere OpenClaw / Claude Code is available (linux).

Who created WebClaw?

It is built and maintained by Nikhil Jathar (@mailnike); the current version is v2.1.3.

More Skills