← Back to Skills Marketplace
krisclarkdev

dakboard

by Kristopher Clark · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
617
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install dakboard
Description
Manage DAKboard screens, devices, and push custom display data.
README (SKILL.md)

DAKboard Skill

This skill provides a command-line interface to interact with the DAKboard API. It allows for comprehensive management of devices and screens, and enables pushing custom data for dynamic displays.

Setup

Before using this skill, you must set your DAKboard API key as an environment variable.

export DAKBOARD_API_KEY="your_api_key_here"

The primary tool for this skill is the Python script located at scripts/dakboard.py.

Available Commands

1. List Devices

Retrieves a list of all DAKboard devices (e.g., Raspberry Pis) linked to your account. This is useful for finding the device_id needed for other commands.

Usage:

python3 scripts/dakboard.py devices

2. List Screens

Retrieves a list of all available screen layouts (e.g., "Big Monthly", "Two Column"). This is used to find the screen_id needed to change a device's display.

Usage:

python3 scripts/dakboard.py screens

3. Update Device Screen

Changes the screen layout currently being displayed on a specific device.

Usage:

# Usage: update-device \x3Cdevice_id> \x3Cscreen_id>
python3 scripts/dakboard.py update-device "dev_0c3e1405a961" "scr_709367acf3d4"

4. Push Metric

Pushes a single, named data point to a "DAKboard Metrics" block. This is ideal for displaying real-time data like sensor readings or statistics.

Usage:

# Usage: metric \x3Ckey> \x3Cvalue>
python3 scripts/dakboard.py metric "indoor_temp" "72.5"

5. Push Fetch Data

Pushes a complete JSON object to a "Fetch" block on a screen. This is for displaying more complex, structured data.

Usage:

# Usage: fetch '\x3Cjson_string>'
python3 scripts/dakboard.py fetch '{"tasks": ["Buy milk", "Walk the dog"], "priority": "high"}'

Security & Privacy

External Endpoints

URL Data Sent Purpose
https://dakboard.com/api/ API Key, Device IDs, Screen IDs, Metrics Data Used to interact with the DAKboard API to list and update devices, and push metrics/fetch data to custom blocks.

Data Handling

Only data provided as arguments to the skill commands (such as messages or metrics to be displayed on the DAKboard) and your DAKBOARD_API_KEY are sent to dakboard.com. No local files are read or written.

Model Invocation Note

This skill is designed to be autonomously invoked by the OpenClaw agent when requested by the user. You can opt-out of autonomous invocation by disabling this skill.

Trust Statement

By using this skill, data sent is limited to the arguments provided and sent directly to dakboard.com. Only install this skill if you trust DAKboard with the information you choose to display.

Usage Guidance
This skill appears to do exactly what it says: it uses your DAKBOARD_API_KEY to call dakboard.com and manage devices/screens or push display data. Before installing, consider: (1) Only provide a DAKBOARD_API_KEY you trust and, if possible, a key with limited scope/permissions; (2) The script appends the API key as a query parameter — query params can be logged by proxies or servers, so avoid using a highly privileged key if logs are a concern; (3) Do not pass sensitive personal data or secrets as command arguments because those values will be sent to dakboard.com; (4) If you are concerned about autonomous invocation, keep the skill user-invocable only (disable autonomous use in agent settings); (5) Review the included script yourself (or ask someone trusted) and rotate the API key if you suspect it was exposed. Overall the skill is internally consistent and coherent with its declared purpose.
Capability Analysis
Type: OpenClaw Skill Name: dakboard Version: 1.0.1 The skill is classified as suspicious due to the handling of the `DAKBOARD_API_KEY`. While the `SKILL.md` and the Python script's internal manifest transparently declare that the API key is sent to `https://dakboard.com/api/`, the `scripts/dakboard.py` file implements this by appending the API key directly as a URL query parameter (`?api_key=...`) for every request. This method of transmitting sensitive credentials is a significant security vulnerability, as API keys in URLs can be logged by web servers, proxies, and network monitoring tools, increasing the risk of exposure and compromise of the DAKboard account. There is no evidence of intentional malicious behavior such as exfiltration to unauthorized endpoints, local file system manipulation, or prompt injection against the agent.
Capability Assessment
Purpose & Capability
Name/description request DAKboard API access and the skill only requires a single DAKBOARD_API_KEY environment variable; the included CLI script and SKILL.md implement device/screen listing and pushing metrics/fetch data to dakboard.com, which is proportional to the stated purpose.
Instruction Scope
SKILL.md directs the agent to run the included Python script with specific commands. The script only accesses DAKBOARD_API_KEY, makes HTTP calls to dakboard.com, and does not read or write local files. Minor mismatch: SKILL.md mentions https://dakboard.com/api/ and the script uses both https://dakboard.com/api and https://dakboard.com/api/2 as bases; this appears implementation-specific rather than malicious.
Install Mechanism
No install spec — instruction-only plus a small shipped Python script. Nothing is downloaded or written to disk by an installer, so install risk is low.
Credentials
Only DAKBOARD_API_KEY is required. The code only reads that environment variable and uses it to authenticate requests to dakboard.com. The number and type of environment variables are proportional to the skill's functionality.
Persistence & Privilege
always is false and the skill does not request persistent system privileges or modify other skills/config. It can be autonomously invoked (platform default), which is expected — not a standalone red flag here.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install dakboard
  3. After installation, invoke the skill by name or use /dakboard
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Updated metadata formatting for better compatibility and clarity. - Moved environment variable requirements from a custom namespace to within the main metadata block. - No changes to core functionality or command usage. - No file or script modifications detected.
v1.0.0
First release
Metadata
Slug dakboard
Version 1.0.1
License
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is dakboard?

Manage DAKboard screens, devices, and push custom display data. It is an AI Agent Skill for Claude Code / OpenClaw, with 617 downloads so far.

How do I install dakboard?

Run "/install dakboard" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is dakboard free?

Yes, dakboard is completely free (open-source). You can download, install and use it at no cost.

Which platforms does dakboard support?

dakboard is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created dakboard?

It is built and maintained by Kristopher Clark (@krisclarkdev); the current version is v1.0.1.

💬 Comments