← 返回 Skills 市场
zach213

Portal

作者 Zach213 · GitHub ↗ · v1.4.0 · MIT-0
cross-platform ⚠ suspicious
372
总下载
0
收藏
0
当前安装
9
版本数
在 OpenClaw 中安装
/install portal
功能描述
Use when asked to make a portal, create a portal, demo a website, product tour, interactive sandbox, or turn any URL into a shareable live browser session. P...
安全使用建议
This SKILL.md looks like a usage manual for an external 'openclaw-portal' plugin rather than a self-contained skill. Before installing or using it: 1) Ask the publisher which package or plugin provides the runtime actions (create_script, make_portal). Do not run the install commands from the guide unless you trust that plugin source. 2) Clarify whether the agent will ask you to upload zipped/base64 project files (safe) or will attempt to read files from the agent host (risky/unexpected). 3) Never paste raw credentials into chat — use the hosted verification_url flow the guide describes, and confirm the URL domain is legitimate. 4) If you need transparency, request an install spec or the plugin code so you can verify what will be installed and where it comes from. Given the missing install/package details, treat this skill as potentially incomplete or misconfigured until you confirm the external dependency and its origin.
功能分析
Type: OpenClaw Skill Name: portal Version: 1.4.0 The skill bundle facilitates high-risk data handling, specifically the zipping and base64-encoding of local project files for exfiltration to a remote service (makeportals.com), as described in SKILL.md. It also includes functionality to capture and save authentication states for SaaS applications. While these capabilities align with the stated purpose of creating interactive web demos, the inherent risk of automated local file access and credential handling by an AI agent warrants a suspicious classification.
能力评估
Purpose & Capability
The stated purpose — turning URLs into live cloud browser sessions with Watch/Play modes — aligns with the SKILL.md workflow and API calls (create_script, make_portal, etc.). However, the skill package contains only SKILL.md and no implementation, yet the instructions tell the agent to install a separate plugin (openclaw-portal) and to call platform-specific RPCs. It's unclear whether those RPCs are provided by the hosting platform or by the missing plugin, creating an implementation gap.
Instruction Scope
Most instructions are scoped to the portal service (authenticate, create_script, make_portal, send returned URLs to user). Some steps instruct zipping and base64-encoding local files and saving login state via a hosted browser — these imply user uploads or access to local project files. The instructions do not explicitly tell the agent to read arbitrary local files, but the guidance to create a base64 payload could be interpreted either as: (a) ask the user to upload/provide the base64, or (b) read the agent's host filesystem. That ambiguity increases risk if an agent implementation tries to satisfy it by reading files without explicit user consent.
Install Mechanism
SKILL.md contains explicit install commands (openclaw plugins install openclaw-portal; openclaw gateway restart), yet the skill package includes no install spec or code. That mismatch is a red flag: the instructions expect an external plugin or binary that is not declared in the registry metadata. The absence of an install spec makes it unclear what will actually be installed or run if a user follows those instructions.
Credentials
The skill declares no required environment variables, no credentials, and no config paths — which is proportionate to the described functionality because the workflow uses hosted browser sessions and device-code style verification URLs. There is no explicit request for unrelated secrets. Note: the flow asks users to authenticate via hosted URLs; users should not paste account credentials directly into chat.
Persistence & Privilege
The skill does not request always:true and does not declare any persistent system-level modifications. Autonomous invocation is allowed by default (platform normal), but there is no evidence the skill requests elevated privileges or writes to other skills' configs.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install portal
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /portal 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.4.0
Added cursor movement guidance, multi-page demo support with max_pages, supported action types table, improving script quality tips, and better goals examples
v1.3.0
- Updated install instructions for OpenClaw: replaced manual plugin download with simple `openclaw plugins install openclaw-portal`. - Removed detailed plugin/tool count and WhatsApp/Telegram targeting from install section for clarity. - No changes to core workflow, PTL specs, or rules—usage and guidance remain the same. - Documentation is now cleaner and easier to follow for all users.
v1.2.2
- Updated installation instructions to use curl for downloading the plugin before installation. - Clarified plugin installation steps for OpenClaw. - Minor clarifications and improvements to language in the install and quick reference sections. - No functional changes to workflow or tool instructions.
v1.2.1
- Updated OpenClaw plugin installation URL to use the Zach213 GitHub repository. - No other functional or documentation changes in this version.
v1.2.0
**Portal 1.2.0 – Adds installation and PTL object clarifications** - Added OpenClaw plugin installation instructions, including download and gateway restart commands. - Specified that the PTL parameter for `make_portal` must be a JSON object, not a string. - Provided explicit JSON examples for Play and Watch modes, detailing structure for `experience` and `guardrails`. - Clarified use of all 27 portal tools and support for WhatsApp, Telegram, and messaging channels. - Original rules and workflow remain, with expanded details on structure and agent configuration.
v1.1.0
Plugin architecture: native tools, no bash/mcporter required. Auto-polls async operations (create_script, make_portal). Messaging-channel friendly.
v1.0.2
Add tool profile requirements: messaging profile needs group:runtime, full profile needs canvas denied. Add explicit rule against canvas tool.
v1.0.1
Re-publish to trigger fresh security scan
v1.0.0
- Initial release of the portal skill, enabling shareable live browser sessions via makeportals.com. - Supports two core modes: Watch (AI-guided demo with narration) and Play (user explores with AI guardrails). - Integrates with multiple platforms (OpenClaw, Cursor, Codex CLI, Claude Desktop) via mcporter. - Step-by-step workflow: authentication, site classification, script/content creation, mandatory user review, deployment, and post-deploy options. - Not intended for building static web pages, mockups, or HTML generation—focuses on live browser interactivity for demos and tours.
元数据
Slug portal
版本 1.4.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 9
常见问题

Portal 是什么?

Use when asked to make a portal, create a portal, demo a website, product tour, interactive sandbox, or turn any URL into a shareable live browser session. P... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 372 次。

如何安装 Portal?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install portal」即可一键安装,无需额外配置。

Portal 是免费的吗?

是的,Portal 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Portal 支持哪些平台?

Portal 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Portal?

由 Zach213(@zach213)开发并维护,当前版本 v1.4.0。

💬 留言讨论