← Back to Skills Marketplace
1952
Downloads
0
Stars
4
Active Installs
1
Versions
Install in OpenClaw
/install vibetunnel
Description
Manage VibeTunnel terminal sessions. Create, list, monitor, and control terminal sessions visible in the VibeTunnel web dashboard.
Usage Guidance
This skill is coherent with its stated purpose, but you should: (1) confirm VT_URL points only to servers you trust (pointing to a remote/production host gives the skill the ability to execute arbitrary commands there); (2) inspect the npm package and the GitHub repository before installing the 'vibetunnel' CLI and prefer installing in an isolated environment if you must; (3) ensure the VibeTunnel server has authentication, is on a trusted network, and that you understand what commands the agent may ask to run; (4) note the minor mismatch that the SKILL.md uses curl/jq while metadata advertises a vibetunnel binary — check whether you actually need to install that CLI.
Capability Analysis
Type: OpenClaw Skill
Name: vibetunnel
Version: 1.0.0
The skill exposes high-risk capabilities by allowing the creation of new terminal sessions with arbitrary commands and sending arbitrary input to existing sessions via the VibeTunnel API, as detailed in SKILL.md. While this functionality is central to the skill's stated purpose of managing terminal sessions, it presents a significant risk for arbitrary code execution if the agent is prompted maliciously. There is no direct evidence of intentional malicious behavior such as data exfiltration or persistence within the skill's definition itself.
Capability Assessment
Purpose & Capability
The name, description, and SKILL.md consistently describe managing VibeTunnel terminal sessions via the REST API. The SKILL.md uses curl and jq for all examples (both declared as required binaries). The metadata and install spec also advertise an npm 'vibetunnel' package and require a 'vibetunnel' binary — the README never invokes that binary. This is a small inconsistency (CLI advertised but not used in the instructions) but plausible (the package may provide a convenience CLI).
Instruction Scope
SKILL.md instructs only API calls to VT_URL (default localhost) using curl/jq; it does not reference unrelated files, other env vars, or unexpected endpoints. However, the documented operations intentionally allow creating sessions that run arbitrary commands and set working directories on the target host — this is expected for a terminal-session manager but is powerful: the skill (when pointed at a server) can cause arbitrary command execution there.
Install Mechanism
Install is an npm package named 'vibetunnel' that creates a 'vibetunnel' binary. npm installs are a common, moderate-risk mechanism (they write code to disk). The SKILL.md examples do not require the CLI to function, so installing the package appears optional for the documented REST usage. Verify the npm package provenance and contents before installing.
Credentials
Only VT_URL is declared as primaryEnv and used in SKILL.md. That is appropriate for a service client. One important operational note: VT_URL can point to a remote server, so granting the skill access to a VT_URL you don't control effectively gives it the ability to run commands on that server — verify and restrict where VT_URL points and ensure server-side authentication/authorization is in place.
Persistence & Privilege
The skill does not request permanent/global presence (always:false), does not declare config paths, and does not attempt to modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) but is not combined with unusual privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install vibetunnel - After installation, invoke the skill by name or use
/vibetunnel - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: pure SKILL.md with curl-based REST API patterns for VibeTunnel session management
Metadata
Frequently Asked Questions
What is VibeTunnel?
Manage VibeTunnel terminal sessions. Create, list, monitor, and control terminal sessions visible in the VibeTunnel web dashboard. It is an AI Agent Skill for Claude Code / OpenClaw, with 1952 downloads so far.
How do I install VibeTunnel?
Run "/install vibetunnel" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is VibeTunnel free?
Yes, VibeTunnel is completely free (open-source). You can download, install and use it at no cost.
Which platforms does VibeTunnel support?
VibeTunnel is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created VibeTunnel?
It is built and maintained by basher83 (@basher83); the current version is v1.0.0.
More Skills