← 返回 Skills 市场
gm4leejun-stack

Discord Connect Wizard

作者 gm4leejun-stack · GitHub ↗ · v0.1.2
cross-platform ⚠ suspicious
553
总下载
0
收藏
2
当前安装
2
版本数
在 OpenClaw 中安装
/install discord-connect-wizard
功能描述
One-machine Discord bot onboarding wizard for OpenClaw. Use when setting up Discord for the first time (create bot, enable intents, invite to a guild, auto-w...
使用说明 (SKILL.md)

Discord Connect Wizard (OpenClaw)

Run a localhost setup wizard that minimizes manual Discord steps.

Non-negotiable manual steps (Discord security):

  • Complete Discord login / CAPTCHA / 2FA if prompted
  • Copy the Bot Token once
  • Click OAuth authorize once
  • If DM pairing is needed: enable DMs in server privacy settings (Discord-side)

Wizard does:

  • Creates a NEW OpenClaw channels.discord.accounts.\x3CaccountId> entry (never overwrites existing bots)
  • Discovers guild/user IDs
  • Writes config via openclaw config set ... --json
  • Restarts gateway and approves pairing for that account

Quick start

Conversation mode (recommended)

Use browser automation + chat prompts. No localhost UI required.

Hard requirement: agent opens and drives the Developer Portal via browser tool (do not ask user to open pages or click around). Resilience rule: if the browser tool times out / disconnects, the agent must self-recover (restart gateway/browser as needed) and retry. Only ask the user to click if recovery is impossible. UX rule: whenever the user must act (login/CAPTCHA/MFA/OAuth authorize), send a screenshot + ONE instruction line. If you need a deterministic step list, run:

node scripts/conversation-checklist.mjs

Then follow references/conversation-mode.md.

Localhost UI mode (optional)

cd \x3Cskill_dir>
node scripts/wizard.mjs
# open http://127.0.0.1:8787

Workflow

1) Create bot + enable intents (guided)

User steps you will see on screen:

  • Welcome to the Developer Portal popup → click Log In (or Create Account)
  • Complete any required login / CAPTCHA / 2FA (agent cannot bypass Discord security)

Then (agent-guided):

  • Create app → Bot → enable Message Content Intent (required)
  • Copy Bot Token (paste into wizard)

2) Invite bot to your server (guided)

Wizard generates an invite URL with scopes:

  • bot
  • applications.commands

and baseline permissions:

  • View Channels, Send Messages, Read Message History, Embed Links, Attach Files (+ Add Reactions optional)

You still need to select the server and click Authorize.

3) Auto-discover IDs (automatic)

  • Server ID: fetched from bot guild list after invite (if multiple, pick by name in wizard)
  • Your User ID: fetched from your first DM to the bot (“hi”) (no Developer Mode copy/paste)

4) Write OpenClaw config + restart (automatic)

Wizard writes:

  • channels.discord.enabled=true
  • channels.discord.token=...
  • channels.discord.groupPolicy="allowlist"
  • channels.discord.guilds.\x3CguildId>.requireMention=false
  • channels.discord.guilds.\x3CguildId>.users=["\x3CyourUserId>"]

Then runs openclaw gateway restart.

5) Pairing (semi-automatic)

  • You DM the bot once
  • Wizard extracts the pairing code and runs openclaw pairing approve discord \x3CCODE>

Browser automation (optional)

If an OpenClaw agent with the browser tool is available, use it to:

  • open Developer Portal pages
  • scroll to the right sections (Intents, Token, OAuth URL generator)
  • capture screenshots of the exact UI that requires user involvement (login/CAPTCHA/2FA, OAuth Authorize)

Do not attempt to bypass CAPTCHA/2FA; pause for manual completion.

Files

  • scripts/wizard.mjs: localhost wizard server + OpenClaw config writer
  • references/openclaw-discord-baseline.md: official baseline config + troubleshooting pointers
安全使用建议
This skill appears to implement an on-machine Discord→OpenClaw onboarding flow, but there are a few things to check before installing: - Confirm you have the local 'openclaw' CLI available: the scripts call 'openclaw config set' and 'openclaw gateway restart' but the skill metadata did not declare this required binary. If 'openclaw' is missing, the scripts will fail. - Understand the secret flow: you will paste your Discord bot token into a local UI; the script says it won't log the token, but you should inspect the included scripts (scripts/wizard.mjs) yourself or run them in an isolated environment to verify they don't transmit the token off-machine. - The agent is instructed to drive the Discord Developer Portal via a browser automation tool and to retry/restart on failures. If you enable autonomous agents or give them browser access, they can open sites and control the local browser — only grant that to agents/tools you trust. - Owner/homepage info is minimal (source unknown, homepage none). Prefer skills from known publishers or inspect the complete scripts before use. Recommended steps: review the two JS files locally, run the wizard in a sandbox or test environment first, ensure 'openclaw' is the expected CLI and that running it with process.env is acceptable, and verify that no network calls in the scripts send the token to unexpected endpoints. If anything is unclear, ask the publisher to explicitly list required binaries (openclaw) and the need for a browser automation tool in metadata.
功能分析
Type: OpenClaw Skill Name: discord-connect-wizard Version: 0.1.2 The skill bundle is designed to automate the setup of a Discord bot for OpenClaw, which involves interacting with Discord APIs, using browser automation, and configuring OpenClaw via its CLI. All actions are aligned with this stated purpose. Crucially, the skill includes explicit safety measures for handling the Discord bot token, such as instructions to 'Never log token' in markdown and code logic that stores it in memory before writing it to OpenClaw's configuration via `openclaw config set ... --json`, without exfiltrating it. The use of `child_process.execFile` for OpenClaw CLI commands in `scripts/wizard.mjs` is mitigated by carefully constructed arguments and `JSON.stringify` for potentially user-controlled values, reducing shell injection risks. Prompt injection instructions in `SKILL.md`, `scripts/conversation-checklist.mjs`, and `references/conversation-mode.md` are focused on secure and efficient execution of the wizard, not malicious manipulation of the agent. There is no evidence of intentional harmful behavior like unauthorized data exfiltration, persistence, or remote control.
能力评估
Purpose & Capability
The stated purpose (bootstrapping a Discord bot into OpenClaw) matches the included code and instructions. However the package metadata declares no required binaries or primary credential, yet scripts call the local 'openclaw' executable and expect a browser automation tool. The skill will also accept/persist a Discord bot token and write OpenClaw config — those are appropriate for the purpose but the missing declaration of the 'openclaw' dependency is an incoherence.
Instruction Scope
SKILL.md instructs an agent to fully drive the Discord Developer Portal via a browser tool and to 'self-recover' (restart gateway/browser) on timeouts — giving the agent broad discretion over local actions. The runtime instructions and UI code request the bot token from the user, call Discord APIs, enumerate guilds/users, write config, restart the gateway, and approve pairing. All of these are within the stated onboarding scope, but the requirement that the agent open and control the Developer Portal (do not ask the user) and auto-retry/restart is operationally broad and should be understood prior to use.
Install Mechanism
There is no external install/download; this is instruction-plus-local-scripts only. No remote binaries or extracts are fetched. That minimizes supply-chain risk. The included Node scripts have no npm dependencies and run locally.
Credentials
The skill requests no environment variables in metadata, but the implementation invokes the local 'openclaw' command (execFile) and passes process.env to it. The skill will accept and handle a Discord bot token (a sensitive secret) supplied via the local UI. Requiring a bot token and restarting OpenClaw is proportional to the stated purpose, but the missing explicit declaration that the 'openclaw' binary must be present (and that the agent needs a browser automation capability) is an incoherence and should be corrected. Note: the code claims it will not log the token, but users must trust the included scripts and agent tooling to honor that.
Persistence & Privilege
The skill is not force-included (always:false) and uses normal autonomous invocation. It performs system actions (runs 'openclaw' to set config and restart the gateway) which are appropriate to onboarding but are privileged in that they modify local service state. This is expected for the purpose but worth noting: a malicious skill with similar privileges would have a wide blast radius, so ensure you trust the source.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install discord-connect-wizard
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /discord-connect-wizard 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.2
Add README with usage + troubleshooting
v0.1.1
Conversation mode: acknowledge token steps, verify gateway restart, agent opens OAuth invite URL
元数据
Slug discord-connect-wizard
版本 0.1.2
许可证
累计安装 2
当前安装数 2
历史版本数 2
常见问题

Discord Connect Wizard 是什么?

One-machine Discord bot onboarding wizard for OpenClaw. Use when setting up Discord for the first time (create bot, enable intents, invite to a guild, auto-w... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 553 次。

如何安装 Discord Connect Wizard?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install discord-connect-wizard」即可一键安装,无需额外配置。

Discord Connect Wizard 是免费的吗?

是的,Discord Connect Wizard 完全免费(开源免费),可自由下载、安装和使用。

Discord Connect Wizard 支持哪些平台?

Discord Connect Wizard 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Discord Connect Wizard?

由 gm4leejun-stack(@gm4leejun-stack)开发并维护,当前版本 v0.1.2。

💬 留言讨论