OpenClaw Deck

Multi-column chat deck UI for OpenClaw agents. Launch a local web interface to manage and chat with multiple agents side-by-side.

This skill appears to do exactly what it says: start a local Vite dev server hosting a deck UI that connects to a local OpenClaw Gateway. Before you install/run it, consider: (1) npm install will fetch packages from the public registry — review package-lock.json or run in an isolated environment if you are cautious, since npm packages can include install scripts; (2) the web UI will load Google Fonts (external network call) and will open WebSocket connections to the gateway URL you supply (default ws://127.0.0.1:18789) — do not pass secrets in the browser URL (token in the query string can be exposed in history); (3) verify you actually want a dev server bound to localhost:5173 on your machine; (4) if you need higher assurance, inspect src/lib/store.ts and other omitted files or run npm install in a sandbox/VM. Overall the skill is internally consistent with its description.

Type: OpenClaw Skill Name: openclaw-deck Version: 0.1.0 The OpenClaw Deck skill bundle is a standard React/Vite application designed to launch a local web UI for managing and chatting with OpenClaw agents. The `SKILL.md` instructions are benign, directing the agent to install dependencies (`npm install`) and start a local development server (`npm run dev`), which are necessary steps for a web UI skill. The frontend code primarily handles UI rendering and establishes a WebSocket connection to a local OpenClaw Gateway (default `ws://127.0.0.1:18789`), optionally using `VITE_GATEWAY_URL` and `VITE_GATEWAY_TOKEN` for configuration. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. All observed behaviors are aligned with the stated purpose of providing a local agent management interface.