← Back to Skills Marketplace
502
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install pixel-office
Description
Animated pixel-art office where agents appear as characters that walk, sit, and interact with furniture in real time. 像素风办公室，让各个 agents 以角色形式实时走动、入座，并与家具互动。
Usage Guidance
Before installing/running this skill: (1) Inspect the GitHub repository it will clone (the SKILL.md references github.com/xmanrui/OpenClaw-bot-review but README mentions other names) — review package.json, server startup code, and any network/exfiltration code. (2) Be aware it will read ~/.openclaw/openclaw.json which may contain API keys; do not run it if you don’t want that local config served by the dashboard. (3) Run the project in an isolated environment (VM/container) or on a machine without sensitive credentials. (4) Confirm the dev server binds to localhost (not 0.0.0.0) or protect it with firewall rules if you must expose it to LAN. (5) If unsure, clone the repo yourself, audit it, and start it manually rather than allowing the skill to perform automatic cloning/installation. (6) The repo name inconsistency is a red flag — verify the exact repository/author before proceeding.
Capability Analysis
Type: OpenClaw Skill
Name: pixel-office
Version: 1.0.0
The skill downloads and executes code from a remote GitHub repository (xmanrui/OpenClaw-bot-review) and accesses the sensitive `~/.openclaw/openclaw.json` configuration file, which typically contains API keys and bot tokens. While these actions are consistent with the stated purpose of launching a dashboard UI, the automated execution of remote code (via `git clone`, `npm install`, and `npm run dev`) and the access to private configuration data represent significant security risks inherent in the skill's design.
Capability Assessment
Purpose & Capability
The skill claims to provide a 'Pixel Office' visualization but its runtime instructions actually clone and run an entire OpenClaw Dashboard project from GitHub. That is plausibly related, but there are inconsistencies: SKILL.md clones https://github.com/xmanrui/OpenClaw-bot-review while README references openclaw-bot-dashboard/openclaw-bot-review interchangeably. Running a full dashboard is a much larger capability than the 'pixel-office' name implies; the repo mismatch is an incoherence that merits caution.
Instruction Scope
Instructions include stopping processes on port 3000 (kill -9 / taskkill), deleting directories, cloning/downloading a GitHub repo, running npm install, and starting a background dev server. These actions are within the scope of 'launch a local dashboard' but they grant the skill the ability to modify files, kill processes, and run arbitrary JavaScript (npm install + npm run dev). The skill also reads the OpenClaw config (~/.openclaw/openclaw.json) and detects LAN IPs to return LAN URLs — behavior consistent with a dashboard but sensitive.
Install Mechanism
No install spec (instruction-only). The runtime flow clones or downloads a ZIP from GitHub (well-known host) and runs npm install/run. Downloading from GitHub is acceptable practice, but executing dependencies and dev server code from a third-party repository is a non-trivial risk because that code will run on the user's machine.
Credentials
The skill declares no required env vars, but it explicitly reads the OpenClaw config at ~/.openclaw/openclaw.json (or %USERPROFILE%\.openclaw\openclaw.json). That local config can contain API keys, gateway tokens, or other secrets. Reading and serving this data via a web UI is functionally justified for a dashboard but is proportionate only if the user expects a local admin dashboard. The skill does not document how sensitive config is handled or whether the dev server binds to localhost only, so this raises confidentiality concerns.
Persistence & Privilege
always is false and the skill does not request permanent platform-wide privileges. It will create a project directory (~/projects/OpenClaw-bot-review) and start a background dev server, which is expected behavior for a local dashboard. It does not modify other skills or system-wide agent settings in the provided instructions.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pixel-office - After installation, invoke the skill by name or use
/pixel-office - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: pixel-office skill forked from openclaw-bot-dashboard with dedicated triggers, bilingual description, /pixel-office access path, and strict LAN URL return rules.
Metadata
Frequently Asked Questions
What is Pixel Office?
Animated pixel-art office where agents appear as characters that walk, sit, and interact with furniture in real time. 像素风办公室，让各个 agents 以角色形式实时走动、入座，并与家具互动。 It is an AI Agent Skill for Claude Code / OpenClaw, with 502 downloads so far.
How do I install Pixel Office?
Run "/install pixel-office" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pixel Office free?
Yes, Pixel Office is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Pixel Office support?
Pixel Office is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pixel Office?
It is built and maintained by xmanrui (@xmanrui); the current version is v1.0.0.
More Skills