← 返回 Skills 市场
rendrag-git

Discord Admin

作者 rendrag-git · GitHub ↗ · v0.1.1 · MIT-0
cross-platform ⚠ suspicious
367
总下载
1
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install discord-admin-plugin
功能描述
Full Discord server administration suite for OpenClaw — roles, moderation, channels, invites, webhooks, audit log, and member management.
使用说明 (SKILL.md)

Discord Admin Plugin

Full Discord server administration suite for OpenClaw. Manage roles, moderate users, configure channels, handle invites and webhooks, and query audit logs — all through a single unified tool.

What it does

Registers a discord_admin tool that exposes 22 administrative actions for Discord servers. The plugin connects its own Discord.js client using your bot token and provides structured JSON responses for every operation.

Features

  • Role Management — Create, edit, and delete roles with color, hoist, mentionable, and permission options
  • Moderation — Kick, ban, unban, timeout, untimeout, and warn users (warnings sent via DM embed)
  • Channel Admin — Lock, unlock, clone, set slowmode, and make channels private with role-based access
  • Bulk Delete — Purge up to 100 messages from a channel
  • Invites — Create, list, and delete server invites with max age/uses/temporary options
  • Webhooks — Create, list, and delete webhooks by channel or guild
  • Server Info — Fetch guild metadata including member count, boost level, channel/role counts
  • Audit Log — Query audit log entries with optional action type filter
  • Member List — List members with optional role filter
  • Nickname Management — Set or clear member nicknames

Setup

  1. Install the plugin and its dependencies:

    clawhub install discord-admin-plugin
    cd ~/.openclaw/skills/discord-admin-plugin && npm install
    
  2. Configure your Discord bot token in your OpenClaw config (this is the only credential required — it is read from channels.discord.token and never sent anywhere except the Discord gateway):

    {
      "channels": {
        "discord": {
          "token": "YOUR_BOT_TOKEN"
        }
      }
    }
    
  3. Ensure your bot has the required gateway intents enabled in the Discord Developer Portal:

    • Guilds
    • Guild Members (privileged)
    • Guild Moderation
    • Guild Messages
    • Guild Invites
    • Guild Webhooks
  4. Restart your gateway: openclaw gateway restart

Credentials & Permissions

This plugin requires a Discord bot token (channels.discord.token in OpenClaw config). The token is used exclusively to connect to the Discord gateway — it is never transmitted to any other endpoint.

Required bot permissions: Manage Roles, Kick Members, Ban Members, Moderate Members, Manage Channels, Manage Messages, Create Instant Invite, Manage Webhooks, View Audit Log, Manage Nicknames.

Required privileged intents: Guild Members (for member listing, kicks, timeouts, nickname changes).

Use a bot token with the minimum permissions your use case needs. Avoid using a full-admin token if you only need a subset of actions.

Actions

Action Description
role-create Create a new role
role-edit Edit an existing role
role-delete Delete a role
kick Kick a member
ban Ban a user
unban Unban a user
timeout Timeout a member (up to 28 days)
untimeout Remove a timeout
warn Send a warning DM embed
bulk-delete Purge 2-100 messages
channel-clone Clone a channel
channel-lock Deny SendMessages for @everyone
channel-unlock Reset SendMessages for @everyone
channel-slowmode Set slowmode (0-21600s)
channel-private Hide channel, grant to specific roles
invite-create Create an invite
invite-list List server invites
invite-delete Delete an invite
webhook-create Create a webhook
webhook-list List webhooks
webhook-delete Delete a webhook
server-info Get server metadata
audit-log Query audit log
member-list List members
nickname-set Set a member's nickname
安全使用建议
This plugin appears coherent for Discord server administration, but exercise normal caution before installing: 1) Only provide a bot token with the minimum permissions and privileged intents needed — avoid giving a full-owner/admin token. Use a test bot/server if possible. 2) The package is authored in TypeScript (index.ts) and uses npm dependencies (discord.js); ensure your OpenClaw runtime can run or build TypeScript plugins. 3) Review the code locally (index.ts) before running to confirm there are no hidden network calls or logging of the token; you can also run it in an isolated/test environment first. 4) Keep the bot token secret and rotate it if you revoke or change permissions. If you want additional assurance, provide the full (untruncated) index.ts and I can look for any network calls or operations beyond the Discord API.
功能分析
Type: OpenClaw Skill Name: discord-admin-plugin Version: 0.1.1 The discord-admin-plugin provides a high-privilege administration suite for Discord servers, including destructive actions like banning users, deleting roles, and purging messages. While the code in index.ts is functionally aligned with the stated purpose and lacks evidence of intentional malice or data exfiltration, the broad administrative surface granted to an AI agent—combined with the lack of mandatory human-in-the-loop confirmations for destructive operations (acknowledged as a security TODO in the code)—presents a significant risk. The plugin requires extensive permissions and privileged gateway intents, making it a high-impact target for prompt injection attacks against the agent.
能力评估
Purpose & Capability
Name/description (Discord server administration) match the declared primary credential (DISCORD_TOKEN), required binary (node), and the actions described in SKILL.md and index.ts (role/channel/moderation/webhook operations). Nothing requested appears unrelated to Discord administration.
Instruction Scope
SKILL.md instructs the agent to install, configure a bot token from OpenClaw config, enable Discord intents, and restart the gateway. The runtime instructions and action list are narrowly scoped to Discord administration. The manifest and code indicate the token is used to connect a discord.js client; the instructions do not ask the agent to read unrelated files or exfiltrate data.
Install Mechanism
There is no remote-download install step; package.json declares standard dependencies (discord.js, typebox) and the plugin's openclaw.install step is simply `npm install`. This is an expected install mechanism for a Node-based plugin and is proportionate to the functionality. (Note: index.ts is TypeScript — the environment must support running TS or build/transpile it; this is an operational, not security, concern.)
Credentials
Only a single credential (DISCORD_TOKEN) is declared as required and mapped to a clear config path (channels.discord.token). That credential is necessary and expected for a bot that manages a guild. No unrelated secrets or multiple unrelated credentials are requested.
Persistence & Privilege
The plugin is not force-enabled (always: false) and uses normal service/tool registration. It does not request persistent, system-wide privileges in the manifest. Autonomous invocation is enabled by default (normal for skills) but is not combined with other red flags.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install discord-admin-plugin
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /discord-admin-plugin 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.1
Fix security scan findings: - Declare bot token as primaryEnv credential with sensitive flag - Add credentials array with configPath and required intents - Document npm install step - Add Credentials & Permissions section to SKILL.md - List required Discord bot permissions in plugin metadata
v0.1.0
Initial release — full Discord server administration suite with 22 actions.
元数据
Slug discord-admin-plugin
版本 0.1.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Discord Admin 是什么?

Full Discord server administration suite for OpenClaw — roles, moderation, channels, invites, webhooks, audit log, and member management. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 367 次。

如何安装 Discord Admin?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install discord-admin-plugin」即可一键安装,无需额外配置。

Discord Admin 是免费的吗?

是的,Discord Admin 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Discord Admin 支持哪些平台?

Discord Admin 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Discord Admin?

由 rendrag-git(@rendrag-git)开发并维护,当前版本 v0.1.1。

💬 留言讨论