← 返回 Skills 市场
dreamwing

ClawBridge

作者 dreamwing · GitHub ↗ · v1.1.1
cross-platform ⚠ suspicious
530
总下载
0
收藏
8
当前安装
2
版本数
在 OpenClaw 中安装
/install clawbridge
功能描述
Mobile-first dashboard for OpenClaw agents showing real-time activity, token costs, and cron task control from your phone.
使用说明 (SKILL.md)

\x3Cskill> \x3Cid>clawbridge\x3C/id> \x3Cname>ClawBridge Dashboard\x3C/name> \x3Cversion>1.0.0\x3C/version> \x3Cdescription>Mobile-first mission control for OpenClaw agents. Runs as a local Node.js sidecar process, providing a web dashboard to monitor real-time agent activity, track token costs across 340+ models, and trigger cron tasks remotely. Optionally creates an outbound-only Cloudflare tunnel for remote access.\x3C/description> \x3Cauthor>DreamWing\x3C/author> \x3Chomepage>https://clawbridge.app\x3C/homepage> \x3Clicense>MIT\x3C/license> \x3Ctags>dashboard,monitoring,mobile,ui,control-panel,cost-tracking,cloudflare,tunnel\x3C/tags>

\x3C!-- What this skill installs and runs --> \x3Cruntime> \x3Ctype>node\x3C/type> \x3Centrypoint>index.js\x3C/entrypoint> \x3Cpersistence>Registers a user-level systemd service (clawbridge.service) that auto-starts on login and restarts on failure.\x3C/persistence> \x3C/runtime>

\x3C!-- System requirements --> \x3Crequires> \x3Cdependency name="node" version=">=18" required="true" /> \x3Cdependency name="npm" version=">=9" required="true" /> \x3Cdependency name="git" version="any" required="false" description="Used for incremental updates; falls back to tarball download if absent." /> \x3Cdependency name="cloudflared" version="latest" required="false" description="Downloaded automatically from github.com/cloudflare/cloudflared if Cloudflare tunnel is enabled. Only required if using remote access without a VPN (Tailscale/WireGuard)." /> \x3C/requires>

\x3C!-- Credentials / environment variables written to .env --> \x3Ccredentials> \x3Cenv name="ACCESS_KEY" description="Randomly generated 32-character hex key used to authenticate dashboard logins. Auto-generated on first install." required="true" generated="true" /> \x3Cenv name="PORT" description="Local TCP port the dashboard listens on. Defaults to 3000, auto-incremented if busy." required="false" default="3000" /> \x3Cenv name="TUNNEL_TOKEN" description="Cloudflare Tunnel token for a permanent named tunnel. Optional — omit to use a temporary Quick Tunnel instead." required="false" /> \x3Cenv name="ENABLE_EMBEDDED_TUNNEL" description="Set to 'true' when a Cloudflare tunnel (permanent or quick) is active." required="false" /> \x3Cenv name="OPENCLAW_PATH" description="Absolute path to the openclaw binary. Auto-detected from PATH; only written to .env if found." required="false" /> \x3C/credentials>

\x3C!-- Network activity --> \x3Cnetwork> \x3Cconnection purpose="Dependency install" destination="registry.npmjs.org" direction="outbound" trigger="install/update" /> \x3Cconnection purpose="Source code download" destination="github.com/dreamwing/clawbridge" direction="outbound" trigger="install/update" /> \x3Cconnection purpose="cloudflared binary download" destination="github.com/cloudflare/cloudflared" direction="outbound" trigger="install (only if tunnel enabled and cloudflared not found)" /> \x3Cconnection purpose="Cloudflare Tunnel relay" destination="*.cloudflareaccess.com, *.trycloudflare.com" direction="outbound" trigger="runtime (only if tunnel enabled)" /> \x3Cconnection purpose="Dashboard UI" destination="localhost" direction="inbound" trigger="runtime" /> \x3C/network>

\x3C!-- File system paths written or modified --> \x3Cfilesystem> \x3Cpath type="write" location="skills/clawbridge/.env" description="Stores ACCESS_KEY, PORT, and optional tunnel config." /> \x3Cpath type="write" location="skills/clawbridge/data/" description="Stores local agent log and token usage analytics." /> \x3Cpath type="write" location="~/.config/systemd/user/clawbridge.service" description="User-level systemd service unit for auto-start." /> \x3Cpath type="write" location="skills/clawbridge/cloudflared" description="cloudflared binary, only if downloaded during tunnel setup." /> \x3C/filesystem>

\x3C!-- Installation — uses the script bundled in this repository --> \x3Cinstall> curl -sL https://raw.githubusercontent.com/dreamwing/clawbridge/master/install.sh | bash \x3C/install>

\x3Cinstructions> ClawBridge installs itself as a persistent background service.

After installation, the dashboard is accessible at the local IP shown in the terminal output.
An ACCESS_KEY is generated and displayed — keep it safe, it is required to log in.

To enable remote access (optional), supply a Cloudflare Tunnel token when prompted,
or leave it blank to use a temporary Quick Tunnel URL.

To update to the latest version:
  curl -sL https://raw.githubusercontent.com/dreamwing/clawbridge/master/install.sh | bash

To stop the service:
  systemctl --user stop clawbridge

Full documentation: https://github.com/dreamwing/clawbridge/blob/master/README.md

\x3C/instructions> \x3C/skill>

ClawBridge Dashboard

Your Agent. In Your Pocket.

ClawBridge is a lightweight, mobile-first web dashboard for OpenClaw. It runs as a local sidecar process and provides:

  • 🧠 Live Activity Feed: Watch agent execution and thinking in real-time via WebSocket.
  • 💰 Token Economy: Track costs across 340+ models with daily/monthly breakdowns.
  • 🚀 Mission Control: Trigger cron jobs manually from your phone.
  • 🔒 Secure by Default: API key auth, session cookies, and optional Cloudflare Tunnel for remote access.

What This Skill Does

  1. Installs the ClawBridge Node.js app from GitHub into skills/clawbridge/
  2. Generates a random ACCESS_KEY and writes it to .env
  3. Registers a user-level systemd service for auto-start
  4. Optionally downloads cloudflared and configures a tunnel for remote access

Installation

curl -sL https://raw.githubusercontent.com/dreamwing/clawbridge/master/install.sh | bash

See README.md for full documentation.

安全使用建议
Before installing: (1) Do NOT pipe the install URL directly to bash without inspection — fetch https://raw.githubusercontent.com/dreamwing/clawbridge/master/install.sh and review its contents first; (2) Verify the project source and release authenticity (the registry listing shows 'source unknown' while SKILL.md references dreamwing/clawbridge and a homepage), and prefer installing from a pinned release or reviewing the repo history; (3) Understand persistence: the installer creates a user systemd service and writes skills/clawbridge/.env (which will contain ACCESS_KEY and optional TUNNEL_TOKEN). Keep TUNNEL_TOKEN private and only enable remote tunnels if you trust the code and host; consider alternative remote access (VPN) if you need stronger control; (4) If you cannot audit the install script, consider running in a restricted/sandboxed environment or avoid installing. Finally, inspect what data the dashboard will read (agent logs, token usage) to confirm you’re not exposing sensitive data to a remote endpoint.
功能分析
Type: OpenClaw Skill Name: clawbridge Version: 1.1.1 The skill is classified as suspicious primarily due to its installation method, which involves piping a remote shell script directly to `bash` (`curl -sL https://raw.githubusercontent.com/dreamwing/clawbridge/master/install.sh | bash`) as specified in SKILL.md. This practice introduces a significant supply chain vulnerability, allowing arbitrary code execution from an external source at install time without prior inspection. Additionally, the skill downloads and executes another external binary (`cloudflared` from github.com/cloudflare/cloudflared) and establishes persistence via a user-level systemd service, both of which are high-risk capabilities, even if declared for legitimate purposes.
能力评估
ℹ Purpose & Capability
The declared capabilities (Node app sidecar, local dashboard, token tracking, optional Cloudflare tunnel) match the dependencies and files the SKILL.md describes (node/npm, .env with ACCESS_KEY, user-level systemd service, optional cloudflared). Minor inconsistency: registry metadata listed no install spec/envs, while the SKILL.md contains explicit install instructions and environment variables (ACCESS_KEY, TUNNEL_TOKEN, etc.). That mismatch is noteworthy but explainable (instruction-only skill embeds its own install steps).
⚠ Instruction Scope
The SKILL.md instructs the agent/user to run a remote install script (curl ... raw.githubusercontent.com | bash), register a user-level systemd service (~/.config/systemd/user/clawbridge.service), write a .env with an ACCESS_KEY and optional tunnel token, and optionally download and run cloudflared for a remote tunnel. These steps grant the skill persistent presence, outbound connectivity, and the ability to run arbitrary code fetched at install/update time. The instructions are somewhat high-level (no explicit safety checks) and allow the installer to enable remote access — this broad scope increases risk if the fetched scripts are malicious or compromised.
⚠ Install Mechanism
Installation is performed by piping a script from raw.githubusercontent.com into bash (curl -sL https://raw.githubusercontent.com/dreamwing/clawbridge/master/install.sh | bash). Download-and-execute from a remote URL is a high-risk install pattern because it runs arbitrary remote code at install and update time. While GitHub raw URLs are common for open-source installs, they still require manual review; the install also may fetch cloudflared and place binaries under skills/clawbridge/, creating executable artifacts on disk.
ℹ Credentials
Environment variables listed in the SKILL.md (ACCESS_KEY generated at install, PORT, TUNNEL_TOKEN, ENABLE_EMBEDDED_TUNNEL, OPENCLAW_PATH) are reasonable for a dashboard/tunnel service. No unrelated cloud credentials or broad secrets are requested. However, TUNNEL_TOKEN is sensitive (it grants remote access to the tunnel) and ACCESS_KEY is stored in a local .env; users should understand where secrets are stored and who can read skills/clawbridge/.env.
⚠ Persistence & Privilege
The skill registers a user-level systemd service that auto-starts on login and restarts on failure, and may download/run cloudflared for remote access. This gives the skill persistent background execution under the user account and network reachability (if tunneling enabled). 'always' is false and model invocation remains allowed (normal), but persistence combined with remote-access capability and remote script updates increases blast radius compared to a transient instruction-only skill.
如何使用
  1. 确保已安装 OpenClaw（本地或 Docker 部署）
  2. 在对话框中输入安装命令：/install clawbridge
  3. 安装完成后，直接呼叫该 Skill 的名称或使用 /clawbridge 触发
  4. 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.1
- Expanded SKILL.md with detailed system requirements, runtime, filesystem, network, and credentials documentation. - Added installation and service management instructions, including remote access setup using Cloudflare Tunnel. - Clarified what the skill installs, generates, registers, and configures. - Updated description and tags to better reflect features and supported environments.
v1.0.0
Initial release of ClawBridge Dashboard. - Provides a mobile-first dashboard for monitoring OpenClaw agent activity. - Features real-time activity feed, token cost tracking (340+ models), and manual cron job controls. - Supports auto-detection of VPNs and quick tunnel creation. - Simple zero-configuration installation process via shell script.
元数据
Slug clawbridge
版本 1.1.1
许可证 —
累计安装 8
当前安装数 8
历史版本数 2
常见问题

ClawBridge 是什么？

Mobile-first dashboard for OpenClaw agents showing real-time activity, token costs, and cron task control from your phone. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 530 次。

如何安装 ClawBridge？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install clawbridge」即可一键安装，无需额外配置。

ClawBridge 是免费的吗？

是的，ClawBridge 完全免费（开源免费），可自由下载、安装和使用。

ClawBridge 支持哪些平台？

ClawBridge 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 ClawBridge？

由 dreamwing（@dreamwing）开发并维护，当前版本 v1.1.1。

推荐 Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191115 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 留言讨论