← 返回 Skills 市场
Claw Mouse
作者
Rylen Anil
· GitHub ↗
· v0.1.0
735
总下载
2
收藏
3
当前安装
1
版本数
在 OpenClaw 中安装
/install claw-mouse
功能描述
Control a Linux X11 desktop by taking screenshots and moving/clicking/typing via xdotool + scrot.
使用说明 (SKILL.md)
claw-mouse
This skill provides a small, scriptable desktop GUI control helper for Linux X11.
It’s intended for “vision loop” automation:
- take a screenshot
- decide where to click
- move/click/type
- repeat
Under the hood it wraps:
scrotfor screenshotsxdotoolfor mouse/keyboard/window control
Files
desktopctl.py— the CLI script
Requirements
- Linux running X11 (not Wayland-only)
python3xdotoolscrot
Ubuntu/Debian:
sudo apt-get update
sudo apt-get install -y xdotool scrot
Usage
From this skill directory:
python3 desktopctl.py screenshot
python3 desktopctl.py click 500 300
python3 desktopctl.py type "hello"
python3 desktopctl.py key ctrl+l
python3 desktopctl.py windows
python3 desktopctl.py activate "Chromium"
DISPLAY / XAUTHORITY
If you’re running from a daemon/headless shell where DISPLAY isn’t set:
DISPLAY=:0 XAUTHORITY=$HOME/.Xauthority python3 desktopctl.py screenshot
Or use flags:
python3 desktopctl.py --display :0 --xauthority $HOME/.Xauthority screenshot
Safety notes
This can click/type into your real desktop session. Use carefully.
Changelog
- 0.1.0: Initial published skill.
安全使用建议
This skill appears to do what it claims: control an X11 desktop via scrot/xdotool. However, running it (or granting an agent access to it) allows automated mouse movement, clicks, typing, window activation, and opening URLs in your real desktop session. Before installing/using: (1) review the desktopctl.py source (it's short and readable); (2) do not supply your main session's XAUTHORITY cookie to untrusted agents — prefer running in a disposable X session or VM; (3) avoid running as root or exposing sensitive windows while testing; (4) ensure xdotool/scrot are installed from your distro package repository; and (5) require explicit user confirmation for any autonomous runs that will control your real desktop.
功能分析
Type: OpenClaw Skill
Name: claw-mouse
Version: 0.1.0
The 'claw-mouse' skill is classified as suspicious due to its inherent high-risk capabilities, even though they align with its stated purpose of desktop GUI control. The `desktopctl.py` script grants full control over the X11 desktop (mouse, keyboard, screenshots, window management) via `xdotool` and `scrot`. Specifically, the `cmd_open` function allows opening arbitrary URLs via `xdg-open`, `gio`, or `chromium-browser`, which could be abused to navigate to malicious websites or trigger client-side vulnerabilities. Additionally, the `cmd_activate` function passes user-controlled regex to `xdotool search --name`, posing a potential denial-of-service vulnerability against the `xdotool` process. While the `SKILL.md` is transparent about the skill's functionality and includes safety notes, the presence of these powerful and potentially abusable capabilities, without clear constraints, warrants a 'suspicious' classification based on the provided guidelines.
能力评估
Purpose & Capability
Name/description match the implementation: the CLI wraps scrot for screenshots, xdotool for mouse/keyboard/window control, and xdg-open/gio as a URL opener. Required binaries (python3, xdotool, scrot) are exactly what the skill needs.
Instruction Scope
SKILL.md instructs use of DISPLAY and XAUTHORITY (and shows flag/ENV usage) which is necessary to access an X11 session. The instructions explicitly warn that the skill can click/type into a real desktop. There are no steps that read or transmit unrelated files or network endpoints beyond opening URLs via a local opener.
Install Mechanism
No install spec; instruction-only skill with one included Python script. Nothing is downloaded from external URLs or written to unexpected system locations.
Credentials
No credentials are declared or required. The tool uses DISPLAY and an XAUTHORITY cookie path (defaults to $HOME/.Xauthority) to interact with X11 — this is appropriate for desktop control but the XAUTHORITY cookie is sensitive because possession grants session access. The skill does not exfiltrate that file, but it does rely on it to operate.
Persistence & Privilege
always is false and there is no installation that modifies other skills or system-wide settings. The skill can be invoked autonomously by the agent (platform default); combined with desktop-control capability this increases risk in practice but is expected for such skills.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install claw-mouse - 安装完成后,直接呼叫该 Skill 的名称或使用
/claw-mouse触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial published skill
元数据
常见问题
Claw Mouse 是什么?
Control a Linux X11 desktop by taking screenshots and moving/clicking/typing via xdotool + scrot. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 735 次。
如何安装 Claw Mouse?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install claw-mouse」即可一键安装,无需额外配置。
Claw Mouse 是免费的吗?
是的,Claw Mouse 完全免费(开源免费),可自由下载、安装和使用。
Claw Mouse 支持哪些平台?
Claw Mouse 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Claw Mouse?
由 Rylen Anil(@rylena)开发并维护,当前版本 v0.1.0。
推荐 Skills