← 返回 Skills 市场
224
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install oskill-proxy
功能描述
Android组件调用代理。通过本地HTTP API在Android设备上启动Activity、启动Service、发送Broadcast、操作ContentProvider。当你无法直接执行Android Intent或组件调用时（例如在Termux环境中），使用此工具完成调用。
安全使用建议
This skill is coherent with its stated purpose (controlling Android components via a local HTTP proxy) but exercise caution before installing: 1) The SKILL.md contains a hard-coded token and the skill metadata does not declare required credentials — treat that token as potentially sensitive and avoid using default tokens. 2) The proxy can read and modify ContentProviders and start components—these are powerful, privacy-sensitive actions; only enable the skill on devices and apps you trust. 3) Verify the OSkillProxy app's origin (APK/package) and confirm the token and baseUrl from the actual app UI rather than relying on embedded defaults. 4) If you proceed, restrict network access to localhost, rotate/replace the token, and limit the agent's permission to call these endpoints unless absolutely necessary.
功能分析
Type: OpenClaw Skill
Name: oskill-proxy
Version: 1.0.0
The skill provides a high-privilege proxy interface to interact with Android system components (Activities, Services, Broadcasts, and ContentProviders) via a local HTTP API at 127.0.0.1:8726. While these capabilities are aligned with the stated purpose of system automation, they grant the agent broad access to sensitive data and system functions, including the ability to query and modify arbitrary ContentProviders. Additionally, the SKILL.md file contains a hardcoded authentication token (43b618ce5f3a46c78fbde7e6eb6bcac3), which is a security vulnerability.
能力评估
Purpose & Capability
The name/description and SKILL.md consistently describe a local HTTP proxy for invoking Android components (Activity, Service, Broadcast, ContentProvider). There are no unrelated binaries or unrelated environment variables requested. However the skill's source/homepage is unknown which reduces trust in the provider.
Instruction Scope
Runtime instructions direct the agent to POST JSON to a local HTTP API (127.0.0.1:8726) to perform powerful actions (start activities/services, send broadcasts, read/modify ContentProviders). These actions are consistent with the declared purpose but are highly privileged on-device operations. The SKILL.md also embeds a config block with a token and baseUrl: the skill requires an Authorization header but the token is not declared in the registry metadata — this inconsistency and the inclusion of a hard-coded token are concerning.
Install Mechanism
Instruction-only skill with no install spec or code files; no downloads or on-disk installs are declared (lower install risk).
Credentials
No environment variables or credentials are declared, yet the API requires an Authorization: Bearer <token>. The SKILL.md includes a hard-coded token in its config section which is not represented in requires.env. The skill's operations can access sensitive device data (ContentProviders) and perform state-changing actions; the lack of explicit, proportionate credential declarations and the embedded token are red flags.
Persistence & Privilege
always is false, no requests to modify other skills or global agent settings. The skill can be invoked autonomously (normal default) but it does not request permanent inclusion or system-wide config changes.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install oskill-proxy - 安装完成后，直接呼叫该 Skill 的名称或使用
/oskill-proxy触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of oskill-proxy — a local HTTP API proxy for Android component invocation.
- Provides endpoints to start Activity, Service, send Broadcasts, and operate on ContentProvider via HTTP.
- Supports both explicit and implicit Intents, extras with typed or auto-inferred parameters, and standard Android flags.
- API includes endpoints for querying, inserting, updating, deleting, and calling methods on ContentProviders.
- All actions require Bearer token authentication (except service status check).
- Includes detailed error codes and example requests for easy integration.
- GET /api/v1/status endpoint allows checking if the proxy service is up (no token required).
元数据
常见问题
Oskill Proxy 是什么？
Android组件调用代理。通过本地HTTP API在Android设备上启动Activity、启动Service、发送Broadcast、操作ContentProvider。当你无法直接执行Android Intent或组件调用时（例如在Termux环境中），使用此工具完成调用。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 224 次。
如何安装 Oskill Proxy？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install oskill-proxy」即可一键安装，无需额外配置。
Oskill Proxy 是免费的吗？
是的，Oskill Proxy 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Oskill Proxy 支持哪些平台？
Oskill Proxy 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Oskill Proxy？
由 SOSO-eng（@soso-eng）开发并维护，当前版本 v1.0.0。
推荐 Skills