← 返回 Skills 市场
3069
总下载
3
收藏
31
当前安装
2
版本数
在 OpenClaw 中安装
/install dashboard
功能描述
Build custom dashboards from any data source with local hosting and visual QA loops.
安全使用建议
Before installing, understand that dashboards may touch sensitive APIs or local data if you configure them that way. Review every generated fetch script before running it, keep credentials in environment variables rather than files, prefer read-only API keys, avoid unnecessary PII, protect ~/dashboard, and add authentication before exposing any dashboard beyond localhost.
功能分析
Type: OpenClaw Skill
Name: dashboard
Version: 1.0.1
The skill instructs the AI agent to generate shell scripts (`fetch.sh`) that utilize `curl` for network requests and `jq` for data processing, writing output to local files. While the provided example targets a legitimate API (`api.stripe.com`) and the skill explicitly states security boundaries (credentials via environment variables, user-driven execution, local hosting), the capability to generate arbitrary shell commands based on user input (as described in SKILL.md) presents a significant prompt injection vulnerability. A malicious user could potentially craft prompts to trick the agent into generating scripts that perform unauthorized data exfiltration or arbitrary command execution, leveraging the `curl` and file write capabilities.
能力评估
Purpose & Capability
The stated purpose is to generate local static dashboards and optional fetch scripts; the artifacts match that purpose, though the supported data sources can include sensitive business, infrastructure, financial, IoT, and creator metrics.
Instruction Scope
The skill repeatedly describes a user-driven model: users choose sources, provide API credentials through environment variables, and run generated scripts manually or through their own cron setup.
Install Mechanism
The package contains only Markdown guidance files, with no executable code, install hooks, hidden scripts, or declared privileged setup behavior.
Credentials
Use of curl, jq, API endpoints, and local JSON files is proportionate for dashboard data collection, but users should review generated scripts and use narrow, read-only credentials where possible.
Persistence & Privilege
The skill discloses storage under ~/dashboard and optional user-managed cron execution; it does not request elevated privileges or create hidden background persistence.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install dashboard - 安装完成后,直接呼叫该 Skill 的名称或使用
/dashboard触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
User-driven data source model, explicit credential handling
v1.0.0
Initial release
元数据
常见问题
Dashboard 是什么?
Build custom dashboards from any data source with local hosting and visual QA loops. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 3069 次。
如何安装 Dashboard?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install dashboard」即可一键安装,无需额外配置。
Dashboard 是免费的吗?
是的,Dashboard 完全免费(开源免费),可自由下载、安装和使用。
Dashboard 支持哪些平台?
Dashboard 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(linux, darwin, win32)。
谁开发了 Dashboard?
由 Iván(@ivangdavila)开发并维护,当前版本 v1.0.1。
推荐 Skills