System Controller

Control Windows desktop software, hardware, and IoT devices. This skill should be used when the user wants to open/close/resize windows, start/stop/monitor p...

This skill is functionally coherent for controlling Windows apps, hardware, serial devices, and local IoT, but it comes with significant power: it can list processes and hardware, take screenshots, install Python packages at runtime, and make arbitrary HTTP requests. Before installing: 1) Inspect the code yourself (you have the scripts) to verify no hard-coded external endpoints or data-exfiltration logic; 2) Only run it in a trusted, isolated environment (or restrict its network access) if you plan to allow it to make HTTP requests; 3) Ensure the agent enforces explicit user confirmation for any destructive action (shutdown, kill, disable network); 4) Consider preventing runtime pip installs or pre-provisioning required packages from trusted sources; 5) If you don't need generic HTTP or system-info collection, prefer a narrower skill or ask for a version that restricts network destinations and sensitive reads.

Type: OpenClaw Skill Name: system-controller Version: 1.0.0 The 'system-controller' skill bundle provides extensive, high-privilege control over a Windows host, including GUI automation (mouse/keyboard), process management, hardware settings, and network configuration. While these capabilities are consistent with the stated purpose, the implementation relies on constructing and executing arbitrary PowerShell and shell commands via `common.py`, which presents a significant risk of command injection if the AI agent processes unsanitized user input. Additionally, the inclusion of full-screen capture and OCR in `gui_controller.py`, combined with generic HTTP request capabilities in `iot_controller.py`, creates a high-risk surface for potential data exfiltration or unauthorized system modification.