← 返回 Skills 市场
yiweil

ClawConnect

作者 yiweil · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1902
总下载
3
收藏
2
当前安装
1
版本数
在 OpenClaw 中安装
/install clawconnect
功能描述
ClawConnect - Universal account connector for AI agents. Send tweets, read/send Gmail, manage calendar, send Slack messages, and more through one API.
使用说明 (SKILL.md)

ClawConnect

Universal account connector for AI agents. One API to access Gmail, Calendar, Twitter, Slack, and Discord.

Setup

  1. Go to https://clawconnect.dev and sign up
  2. Connect your accounts (Twitter, Gmail, Calendar, Slack, Discord)
  3. Get your API key from the dashboard
  4. All requests require Authorization: Bearer \x3CAPI_KEY>

Base URL: https://clawconnect.dev

API Endpoints

Connections

List connected accounts:

curl -H "Authorization: Bearer $CLAWCONNECT_API_KEY" \
  https://clawconnect.dev/api/v1/connections

Twitter

Get your Twitter profile:

curl -H "Authorization: Bearer $CLAWCONNECT_API_KEY" \
  https://clawconnect.dev/api/v1/twitter/me

Get timeline:

curl -H "Authorization: Bearer $CLAWCONNECT_API_KEY" \
  https://clawconnect.dev/api/v1/twitter/timeline

Post a tweet:

curl -X POST -H "Authorization: Bearer $CLAWCONNECT_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"text": "Hello from ClawConnect!"}' \
  https://clawconnect.dev/api/v1/twitter/tweet

Gmail

List emails (with optional search query and max results):

curl -H "Authorization: Bearer $CLAWCONNECT_API_KEY" \
  "https://clawconnect.dev/api/v1/gmail/messages?q=is:unread&maxResults=10"

Get email by ID:

curl -H "Authorization: Bearer $CLAWCONNECT_API_KEY" \
  https://clawconnect.dev/api/v1/gmail/messages/MESSAGE_ID

Send email:

curl -X POST -H "Authorization: Bearer $CLAWCONNECT_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"to": "[email protected]", "subject": "Hello", "body": "Email body here"}' \
  https://clawconnect.dev/api/v1/gmail/send

Calendar

List events (with optional time range and max results):

curl -H "Authorization: Bearer $CLAWCONNECT_API_KEY" \
  "https://clawconnect.dev/api/v1/calendar/events?timeMin=2025-01-01T00:00:00Z&timeMax=2025-01-31T23:59:59Z&maxResults=20"

Slack

List workspace users:

curl -H "Authorization: Bearer $CLAWCONNECT_API_KEY" \
  https://clawconnect.dev/api/v1/slack/users

List channels:

curl -H "Authorization: Bearer $CLAWCONNECT_API_KEY" \
  https://clawconnect.dev/api/v1/slack/channels

Get your Slack profile:

curl -H "Authorization: Bearer $CLAWCONNECT_API_KEY" \
  https://clawconnect.dev/api/v1/slack/profile

Send a message (channel can be a channel ID or user ID):

curl -X POST -H "Authorization: Bearer $CLAWCONNECT_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"channel": "C01234ABCDE", "text": "Hello!"}' \
  https://clawconnect.dev/api/v1/slack/send

Discord

Get your Discord profile:

curl -H "Authorization: Bearer $CLAWCONNECT_API_KEY" \
  https://clawconnect.dev/api/v1/discord/me

List guilds (servers):

curl -H "Authorization: Bearer $CLAWCONNECT_API_KEY" \
  https://clawconnect.dev/api/v1/discord/guilds

Notes

  • Confirm before sending tweets or emails.
  • Use q parameter on Gmail to filter (same syntax as Gmail search).
  • Calendar timeMin/timeMax accept ISO 8601 timestamps.
  • Discord send is currently disabled (user OAuth limitation). Read-only for now.
  • For Slack with multiple workspaces, pass connection_id to target a specific connection.
安全使用建议
This skill delegates access to many of your accounts to a third-party service (clawconnect.dev). Before installing or providing an API key: 1) Verify the service identity and trustworthiness (official homepage, company, privacy policy, and contact). The registry metadata lacks the CLAWCONNECT_API_KEY declaration present in the SKILL.md—ask the publisher to correct that. 2) Understand scope: one API key could permit reading/sending email, calendar events, messages, and posting on your behalf; only use with throwaway or limited-permission accounts during testing. 3) Confirm how the service stores and protects tokens, and whether you can revoke individual provider authorizations. 4) Prefer least privilege: restrict the aggregator's access in each connected service (use narrow OAuth scopes if possible). 5) If you need stronger assurance, request source code or a vendor security/privacy statement, or consider using well-known, audited integrations or a self-hosted connector. Additional information (official homepage, privacy/security docs, or source code) would raise confidence; absence of that information keeps this assessment at "suspicious."
功能分析
Type: OpenClaw Skill Name: clawconnect Version: 1.0.0 The skill bundle defines a 'ClawConnect' agent skill designed to interact with various external services (Twitter, Gmail, Slack, Calendar, Discord) via the `clawconnect.dev` API. All `curl` commands are directed to this single, stated domain and require an explicit API key (`CLAWCONNECT_API_KEY`). There is no evidence of data exfiltration beyond the stated purpose, malicious execution (e.g., `curl|bash`), persistence mechanisms, or obfuscation. The `SKILL.md` instructions are transparent, align with the skill's described purpose, and even include a safety instruction for the agent ('Confirm before sending tweets or emails'), indicating a lack of malicious prompt injection intent.
能力评估
Purpose & Capability
The name/description and SKILL.md are consistent: this is an aggregator API that proxies Gmail, Calendar, Twitter, Slack, Discord, etc. That capability justifies requesting a single aggregator API key. However, the registry metadata declares no required environment variables or primary credential while the SKILL.md consistently uses CLAWCONNECT_API_KEY — an inconsistency that should be explained.
Instruction Scope
The instructions are limited to calling a single external API (https://clawconnect.dev) and show curl examples for each service. They do not instruct reading local files, other environment variables, or performing unexpected actions. They do, however, direct all sensitive traffic to a third-party domain.
Install Mechanism
Instruction-only skill with no install spec and no code files — low surface area for disk writes or automatic installs.
Credentials
SKILL.md expects an API key (CLAWCONNECT_API_KEY) but the skill metadata lists no required env vars/primary credential. More importantly, a single API key would grant a third party broad access to Gmail, Calendar, Twitter, Slack and Discord accounts — a high-privilege capability that must be explicitly declared, scoped, and trusted before use.
Persistence & Privilege
The skill does not request always:true, has no install actions, and does not appear to persist configuration on the agent. Autonomous invocation is allowed (platform default) but is not combined with other privilege escalation signals here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install clawconnect
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /clawconnect 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release: Gmail, Calendar, Twitter, Slack, Discord integrations
元数据
Slug clawconnect
版本 1.0.0
许可证
累计安装 2
当前安装数 2
历史版本数 1
常见问题

ClawConnect 是什么?

ClawConnect - Universal account connector for AI agents. Send tweets, read/send Gmail, manage calendar, send Slack messages, and more through one API. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1902 次。

如何安装 ClawConnect?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install clawconnect」即可一键安装,无需额外配置。

ClawConnect 是免费的吗?

是的,ClawConnect 完全免费(开源免费),可自由下载、安装和使用。

ClawConnect 支持哪些平台?

ClawConnect 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 ClawConnect?

由 yiweil(@yiweil)开发并维护,当前版本 v1.0.0。

💬 留言讨论