← Back to Skills Marketplace
387
Downloads
0
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install synology-dsm
Description
Manage Synology NAS via DSM Web API. Authenticate, browse and manage files (FileStation), manage download tasks (DownloadStation), and query system info. Use...
Usage Guidance
This skill appears to do what it says (talk to a Synology DSM API) and uses expected parameters, but the package metadata does not declare the environment variables or required binaries shown in SKILL.md. Before installing or providing credentials: 1) Verify the skill source and inspect SKILL.md yourself (you already have it). 2) Prefer creating a dedicated DSM account with minimal permissions for the skill (not your admin account). 3) Use HTTPS (port 5001) and enable 2FA; if possible use short‑lived credentials. 4) Avoid putting plaintext passwords into persistent environment variables or logs — prefer prompting per-session if your platform supports it. 5) Ensure the platform will not upload or store SYNOLOGY_PASS or SID to remote logs/backups you don’t control. 6) Confirm curl and jq are available on the agent host, or adjust commands accordingly. If you cannot verify the metadata omission or how credentials are stored/used by the platform, consider treating this skill as untrusted until those questions are answered.
Capability Analysis
Type: OpenClaw Skill
Name: synology-dsm
Version: 1.0.0
The synology-dsm skill provides a legitimate and well-documented interface for managing a Synology NAS via its official Web API. It includes comprehensive instructions for authentication, file management (FileStation), and download task management (DownloadStation) using standard curl commands. The skill explicitly advises against hardcoding credentials, recommends HTTPS, and provides detailed error handling and API references (SKILL.md, references/filestation-api.md, references/downloadstation-api.md), showing no signs of malicious intent or unauthorized data exfiltration.
Capability Assessment
Purpose & Capability
The SKILL.md content is consistent with the declared purpose (manage DSM FileStation and DownloadStation via the DSM Web API). However the registry metadata lists no required environment variables or credentials even though the runtime instructions explicitly require SYNOLOGY_HOST, SYNOLOGY_PORT, SYNOLOGY_USER, and SYNOLOGY_PASS, and use curl/jq. That mismatch is likely a packaging/metadata omission.
Instruction Scope
All instructions stay within the stated scope: authenticating to DSM, calling FileStation and DownloadStation APIs, handling 2FA, and logout. The skill does not instruct reading unrelated system files or contacting third‑party endpoints beyond the user’s NAS and the example download URLs. It does show commands that will expose credentials on the shell if used carelessly (notes in the SKILL.md advise against hardcoding).
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest install risk. Nothing will be written to disk by an installer. Examples assume curl and jq are available but no installer is provided.
Credentials
The SKILL.md requires four environment variables (SYNOLOGY_HOST, SYNOLOGY_PORT, SYNOLOGY_USER, SYNOLOGY_PASS) which are proportionate to the task. The concern is that the skill’s manifest/registry metadata did not declare these required env vars or the use of network credentials, nor did it declare required binaries (curl, jq). This metadata omission makes it unclear to automated policy checks what secrets or tools the skill needs and increases risk if you provide credentials without verifying how the platform stores or transmits them.
Persistence & Privilege
always is false and the skill has no install hooks or instructions to modify agent/system config. It requires explicit invocation by the user (and the platform default allows autonomous invocation, but that is not changed by the skill).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install synology-dsm - After installation, invoke the skill by name or use
/synology-dsm - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the Synology DSM skill.
- Enables management of Synology NAS devices via DSM Web API.
- Supports authentication (including 2FA), file browsing and management through FileStation, and download task control via DownloadStation.
- Allows querying of system, storage, and network info.
- Provides guidance for common error handling and session management.
- Usage requires user-supplied DSM credentials and environment variables.
Metadata
Frequently Asked Questions
What is Synology DSM?
Manage Synology NAS via DSM Web API. Authenticate, browse and manage files (FileStation), manage download tasks (DownloadStation), and query system info. Use... It is an AI Agent Skill for Claude Code / OpenClaw, with 387 downloads so far.
How do I install Synology DSM?
Run "/install synology-dsm" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Synology DSM free?
Yes, Synology DSM is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Synology DSM support?
Synology DSM is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Synology DSM?
It is built and maintained by Eric Liu (@eric1932); the current version is v1.0.0.
More Skills