← 返回 Skills 市场
502
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install pixel-office
功能描述
Animated pixel-art office where agents appear as characters that walk, sit, and interact with furniture in real time. 像素风办公室，让各个 agents 以角色形式实时走动、入座，并与家具互动。
安全使用建议
Before installing/running this skill: (1) Inspect the GitHub repository it will clone (the SKILL.md references github.com/xmanrui/OpenClaw-bot-review but README mentions other names) — review package.json, server startup code, and any network/exfiltration code. (2) Be aware it will read ~/.openclaw/openclaw.json which may contain API keys; do not run it if you don’t want that local config served by the dashboard. (3) Run the project in an isolated environment (VM/container) or on a machine without sensitive credentials. (4) Confirm the dev server binds to localhost (not 0.0.0.0) or protect it with firewall rules if you must expose it to LAN. (5) If unsure, clone the repo yourself, audit it, and start it manually rather than allowing the skill to perform automatic cloning/installation. (6) The repo name inconsistency is a red flag — verify the exact repository/author before proceeding.
功能分析
Type: OpenClaw Skill
Name: pixel-office
Version: 1.0.0
The skill downloads and executes code from a remote GitHub repository (xmanrui/OpenClaw-bot-review) and accesses the sensitive `~/.openclaw/openclaw.json` configuration file, which typically contains API keys and bot tokens. While these actions are consistent with the stated purpose of launching a dashboard UI, the automated execution of remote code (via `git clone`, `npm install`, and `npm run dev`) and the access to private configuration data represent significant security risks inherent in the skill's design.
能力评估
Purpose & Capability
The skill claims to provide a 'Pixel Office' visualization but its runtime instructions actually clone and run an entire OpenClaw Dashboard project from GitHub. That is plausibly related, but there are inconsistencies: SKILL.md clones https://github.com/xmanrui/OpenClaw-bot-review while README references openclaw-bot-dashboard/openclaw-bot-review interchangeably. Running a full dashboard is a much larger capability than the 'pixel-office' name implies; the repo mismatch is an incoherence that merits caution.
Instruction Scope
Instructions include stopping processes on port 3000 (kill -9 / taskkill), deleting directories, cloning/downloading a GitHub repo, running npm install, and starting a background dev server. These actions are within the scope of 'launch a local dashboard' but they grant the skill the ability to modify files, kill processes, and run arbitrary JavaScript (npm install + npm run dev). The skill also reads the OpenClaw config (~/.openclaw/openclaw.json) and detects LAN IPs to return LAN URLs — behavior consistent with a dashboard but sensitive.
Install Mechanism
No install spec (instruction-only). The runtime flow clones or downloads a ZIP from GitHub (well-known host) and runs npm install/run. Downloading from GitHub is acceptable practice, but executing dependencies and dev server code from a third-party repository is a non-trivial risk because that code will run on the user's machine.
Credentials
The skill declares no required env vars, but it explicitly reads the OpenClaw config at ~/.openclaw/openclaw.json (or %USERPROFILE%\.openclaw\openclaw.json). That local config can contain API keys, gateway tokens, or other secrets. Reading and serving this data via a web UI is functionally justified for a dashboard but is proportionate only if the user expects a local admin dashboard. The skill does not document how sensitive config is handled or whether the dev server binds to localhost only, so this raises confidentiality concerns.
Persistence & Privilege
always is false and the skill does not request permanent platform-wide privileges. It will create a project directory (~/projects/OpenClaw-bot-review) and start a background dev server, which is expected behavior for a local dashboard. It does not modify other skills or system-wide agent settings in the provided instructions.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pixel-office - 安装完成后，直接呼叫该 Skill 的名称或使用
/pixel-office触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: pixel-office skill forked from openclaw-bot-dashboard with dedicated triggers, bilingual description, /pixel-office access path, and strict LAN URL return rules.
元数据
常见问题
Pixel Office 是什么？
Animated pixel-art office where agents appear as characters that walk, sit, and interact with furniture in real time. 像素风办公室，让各个 agents 以角色形式实时走动、入座，并与家具互动。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 502 次。
如何安装 Pixel Office？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pixel-office」即可一键安装，无需额外配置。
Pixel Office 是免费的吗？
是的，Pixel Office 完全免费（开源免费），可自由下载、安装和使用。
Pixel Office 支持哪些平台？
Pixel Office 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pixel Office？
由 xmanrui（@xmanrui）开发并维护，当前版本 v1.0.0。
推荐 Skills