← Back to Skills Marketplace
Pid
by
bytesagain4
· GitHub ↗
· v1.0.0
· MIT-0
128
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install pid
Description
PID controller tuning and simulation tool. Use when json pid tasks, csv pid tasks, checking pid status.
Usage Guidance
This skill appears to be a simple local CLI that stores data under ~/.pid (or $PID_DIR if you set it). Before running: inspect scripts/script.sh yourself (it's a shell script that will be executed), back up any existing ~/.pid directory you care about, and consider running it in a sandbox if you want extra safety. Note: sed -i and other utilities behave slightly differently on some platforms (e.g., macOS), so test commands in your environment. No network access or secrets are requested by the skill.
Capability Analysis
Type: OpenClaw Skill
Name: pid
Version: 1.0.0
The skill bundle is classified as suspicious due to a command injection vulnerability in the `cmd_config` function within `scripts/script.sh`. The script uses unsanitized variables (`key` and `val`) directly inside a `sed` substitution command, which could allow an attacker to perform unauthorized file writes or modifications if they can influence the configuration inputs. Additionally, there is a functional discrepancy: while `SKILL.md` describes the tool as a PID controller tuning and simulation suite, the provided code is merely a basic string logging and metadata management utility.
Capability Assessment
Purpose & Capability
Name/description (PID tuning/simulation, JSON/CSV tasks) match the included shell script which stores entries, lists/searches/exports them, and manages a local config. No unrelated capabilities are requested.
Instruction Scope
SKILL.md directs the agent to run scripts/script.sh with specific commands. The script only reads/writes files under DATA_DIR (default ~/.pid) and uses standard shell utilities (grep, sed, tail, etc.). It does not access other system paths, credentials, or external endpoints.
Install Mechanism
There is no install spec (instruction-only skill) and the only executable code is a bundled shell script. No packages are downloaded or extracted from remote URLs. Risk is limited to executing the provided local script.
Credentials
No required environment variables or credentials are declared. The script accepts an optional PID_DIR env var to override the data directory, which is proportional to its purpose.
Persistence & Privilege
always:false and user-invocable:true. The skill does not request permanent platform-wide privileges, nor does it modify other skills or global agent settings. It will create and edit files only in its own data directory.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pid - After installation, invoke the skill by name or use
/pid - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
publish v1.0.0
Metadata
Frequently Asked Questions
What is Pid?
PID controller tuning and simulation tool. Use when json pid tasks, csv pid tasks, checking pid status. It is an AI Agent Skill for Claude Code / OpenClaw, with 128 downloads so far.
How do I install Pid?
Run "/install pid" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pid free?
Yes, Pid is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Pid support?
Pid is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pid?
It is built and maintained by bytesagain4 (@xueyetianya); the current version is v1.0.0.
More Skills