← 返回 Skills 市场
820
总下载
0
收藏
0
当前安装
6
版本数
在 OpenClaw 中安装
/install pixel-lobster
功能描述
Pixel art desktop lobster that lip-syncs to OpenClaw TTS speech. Use when: (1) user wants a visual avatar for their AI agent, (2) user wants a desktop overla...
安全使用建议
This skill appears to do what it says: a local Electron app that lip-syncs to a TTS envelope endpoint or — if you opt into it — captures system audio. Before installing: (1) prefer audioMode='tts' if you do not want any screen/audio capture; (2) review and, if desired, edit app/config.json to point ttsUrl to a local trusted TTS server; (3) be aware npm install/npx electron will download packages from npm (including Electron), so run it on a machine you trust or in a sandbox/VM if you want extra isolation; (4) because the skill source/homepage is unknown, inspect the bundled files yourself (they are present) and only grant media/display permissions if you understand and accept that the app can capture system audio/display while running.
功能分析
Type: OpenClaw Skill
Name: pixel-lobster
Version: 1.2.1
The skill is an Electron application designed to provide a desktop overlay that lip-syncs to audio. It is classified as 'suspicious' due to its use of high-risk capabilities, specifically screen and audio capture (via `desktopCapturer` and `navigator.mediaDevices.getDisplayMedia` in `app/main.js` and `app/preload.js`) and local network requests (via `fetch` in `app/lobster.html`). While these capabilities are integral to the skill's stated purpose (e.g., 'system audio' mode), they represent a significant attack surface if the skill were compromised or misconfigured. No evidence of intentional malicious behavior such as data exfiltration, persistence, or unauthorized remote control was found, and the Electron app follows security best practices like `contextIsolation`.
能力评估
Purpose & Capability
Name/description (pixel art lobster that lip-syncs to TTS) matches the included files and runtime behavior. The app reads a local config, polls a TTS envelope endpoint, or captures system audio in an explicit 'system' mode. No unrelated credentials, binaries, or external services are requested.
Instruction Scope
SKILL.md instructs installing dependencies and launching the bundled Electron app and explains configuration keys. The only scope creep is the documented 'system' audio mode: when enabled the app requests display/media capture and wires up loopback audio. That is a legitimately described feature but it grants the app permission to capture system audio (and requires granting display-capture permissions). If you do not want screen/audio capture, keep audioMode='tts'.
Install Mechanism
There is no external download URL; the app is bundled inside the skill. Installing runs 'npm install' which will fetch Electron and other packages from the npm registry (devDependency electron ^34.0.0). This is expected for an Electron app but means npm will download code during first run — a moderate but normal risk for desktop apps.
Credentials
The skill requests no environment variables, no credentials, and no config paths beyond its own config.json. The network access is proportional: the app uses a configurable ttsUrl (default 127.0.0.1:8787) and does not hard-code remote endpoints.
Persistence & Privilege
always:false and the skill is user-invocable. It registers global shortcuts (F8/F9/F12) and sets permission handlers for its Electron session (to allow media/display capture in 'system' mode). Those are normal for a desktop overlay but mean the app can intercept global keys while running and can request and automatically allow certain media permissions in its session.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pixel-lobster - 安装完成后，直接呼叫该 Skill 的名称或使用
/pixel-lobster触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.2.1
Address security review findings: (1) default audioMode changed to 'tts' — no system audio capture by default; (2) setPermissionRequestHandler scoped to system audio mode only, approves media permissions only (not blanket true); (3) setDisplayMediaRequestHandler only registered in system audio mode. TTS mode has zero media capture footprint.
v1.2.0
Bundle app source directly in skill (no external repo clone). All JS/HTML/config files included at app/ — ClawHub can scan everything. Eliminates supply chain concern from git clone + npm install of external repo. No behavior change: npm install still runs once on first launch.
v1.1.2
Fix broken lobster after v1.1.1: preload.js now exposes all required IPC channels (onDisplayChanged, setClickThrough, getSources). lobster.html no longer requires set-spawn IPC to start swimming — starts immediately. F8 re-centers lobster on new display.
v1.1.1
Add F8 live monitor cycling: press F8 to move the lobster to the next display at runtime. config.monitor still sets initial placement on startup. Also adds ipcMain click-through control and clean ready-to-show startup.
v1.1.0
Restructured skill bundle: Electron app now hosted separately on GitHub (https://github.com/JoeProAI/pixel-lobster) rather than bundled with the skill. Includes config template and launch helper only. Improved SKILL.md with full configuration reference and OpenClaw integration notes.
v1.0.0
Initial release: pixel art desktop lobster with TTS lip-sync
元数据
常见问题
Pixel Lobster Skill 是什么？
Pixel art desktop lobster that lip-syncs to OpenClaw TTS speech. Use when: (1) user wants a visual avatar for their AI agent, (2) user wants a desktop overla... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 820 次。
如何安装 Pixel Lobster Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pixel-lobster」即可一键安装，无需额外配置。
Pixel Lobster Skill 是免费的吗？
是的，Pixel Lobster Skill 完全免费（开源免费），可自由下载、安装和使用。
Pixel Lobster Skill 支持哪些平台？
Pixel Lobster Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pixel Lobster Skill？
由 JoeProAI（@joeproai）开发并维护，当前版本 v1.2.1。
推荐 Skills