← 返回 Skills 市场
krisclarkdev

dakboard

作者 Kristopher Clark · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
617
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install dakboard
功能描述
Manage DAKboard screens, devices, and push custom display data.
使用说明 (SKILL.md)

DAKboard Skill

This skill provides a command-line interface to interact with the DAKboard API. It allows for comprehensive management of devices and screens, and enables pushing custom data for dynamic displays.

Setup

Before using this skill, you must set your DAKboard API key as an environment variable.

export DAKBOARD_API_KEY="your_api_key_here"

The primary tool for this skill is the Python script located at scripts/dakboard.py.

Available Commands

1. List Devices

Retrieves a list of all DAKboard devices (e.g., Raspberry Pis) linked to your account. This is useful for finding the device_id needed for other commands.

Usage:

python3 scripts/dakboard.py devices

2. List Screens

Retrieves a list of all available screen layouts (e.g., "Big Monthly", "Two Column"). This is used to find the screen_id needed to change a device's display.

Usage:

python3 scripts/dakboard.py screens

3. Update Device Screen

Changes the screen layout currently being displayed on a specific device.

Usage:

# Usage: update-device \x3Cdevice_id> \x3Cscreen_id>
python3 scripts/dakboard.py update-device "dev_0c3e1405a961" "scr_709367acf3d4"

4. Push Metric

Pushes a single, named data point to a "DAKboard Metrics" block. This is ideal for displaying real-time data like sensor readings or statistics.

Usage:

# Usage: metric \x3Ckey> \x3Cvalue>
python3 scripts/dakboard.py metric "indoor_temp" "72.5"

5. Push Fetch Data

Pushes a complete JSON object to a "Fetch" block on a screen. This is for displaying more complex, structured data.

Usage:

# Usage: fetch '\x3Cjson_string>'
python3 scripts/dakboard.py fetch '{"tasks": ["Buy milk", "Walk the dog"], "priority": "high"}'

Security & Privacy

External Endpoints

URL Data Sent Purpose
https://dakboard.com/api/ API Key, Device IDs, Screen IDs, Metrics Data Used to interact with the DAKboard API to list and update devices, and push metrics/fetch data to custom blocks.

Data Handling

Only data provided as arguments to the skill commands (such as messages or metrics to be displayed on the DAKboard) and your DAKBOARD_API_KEY are sent to dakboard.com. No local files are read or written.

Model Invocation Note

This skill is designed to be autonomously invoked by the OpenClaw agent when requested by the user. You can opt-out of autonomous invocation by disabling this skill.

Trust Statement

By using this skill, data sent is limited to the arguments provided and sent directly to dakboard.com. Only install this skill if you trust DAKboard with the information you choose to display.

安全使用建议
This skill appears to do exactly what it says: it uses your DAKBOARD_API_KEY to call dakboard.com and manage devices/screens or push display data. Before installing, consider: (1) Only provide a DAKBOARD_API_KEY you trust and, if possible, a key with limited scope/permissions; (2) The script appends the API key as a query parameter — query params can be logged by proxies or servers, so avoid using a highly privileged key if logs are a concern; (3) Do not pass sensitive personal data or secrets as command arguments because those values will be sent to dakboard.com; (4) If you are concerned about autonomous invocation, keep the skill user-invocable only (disable autonomous use in agent settings); (5) Review the included script yourself (or ask someone trusted) and rotate the API key if you suspect it was exposed. Overall the skill is internally consistent and coherent with its declared purpose.
功能分析
Type: OpenClaw Skill Name: dakboard Version: 1.0.1 The skill is classified as suspicious due to the handling of the `DAKBOARD_API_KEY`. While the `SKILL.md` and the Python script's internal manifest transparently declare that the API key is sent to `https://dakboard.com/api/`, the `scripts/dakboard.py` file implements this by appending the API key directly as a URL query parameter (`?api_key=...`) for every request. This method of transmitting sensitive credentials is a significant security vulnerability, as API keys in URLs can be logged by web servers, proxies, and network monitoring tools, increasing the risk of exposure and compromise of the DAKboard account. There is no evidence of intentional malicious behavior such as exfiltration to unauthorized endpoints, local file system manipulation, or prompt injection against the agent.
能力评估
Purpose & Capability
Name/description request DAKboard API access and the skill only requires a single DAKBOARD_API_KEY environment variable; the included CLI script and SKILL.md implement device/screen listing and pushing metrics/fetch data to dakboard.com, which is proportional to the stated purpose.
Instruction Scope
SKILL.md directs the agent to run the included Python script with specific commands. The script only accesses DAKBOARD_API_KEY, makes HTTP calls to dakboard.com, and does not read or write local files. Minor mismatch: SKILL.md mentions https://dakboard.com/api/ and the script uses both https://dakboard.com/api and https://dakboard.com/api/2 as bases; this appears implementation-specific rather than malicious.
Install Mechanism
No install spec — instruction-only plus a small shipped Python script. Nothing is downloaded or written to disk by an installer, so install risk is low.
Credentials
Only DAKBOARD_API_KEY is required. The code only reads that environment variable and uses it to authenticate requests to dakboard.com. The number and type of environment variables are proportional to the skill's functionality.
Persistence & Privilege
always is false and the skill does not request persistent system privileges or modify other skills/config. It can be autonomously invoked (platform default), which is expected — not a standalone red flag here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install dakboard
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /dakboard 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Updated metadata formatting for better compatibility and clarity. - Moved environment variable requirements from a custom namespace to within the main metadata block. - No changes to core functionality or command usage. - No file or script modifications detected.
v1.0.0
First release
元数据
Slug dakboard
版本 1.0.1
许可证
累计安装 0
当前安装数 0
历史版本数 2
常见问题

dakboard 是什么?

Manage DAKboard screens, devices, and push custom display data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 617 次。

如何安装 dakboard?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install dakboard」即可一键安装,无需额外配置。

dakboard 是免费的吗?

是的,dakboard 完全免费(开源免费),可自由下载、安装和使用。

dakboard 支持哪些平台?

dakboard 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 dakboard?

由 Kristopher Clark(@krisclarkdev)开发并维护,当前版本 v1.0.1。

💬 留言讨论