← 返回 Skills 市场

Remote Desktop Support

Name: Remote Desktop Support
Author: tommyclawd

作者 Tommy · GitHub ↗ · v0.1.0 · MIT-0

linux ⚠ suspicious

总下载

当前安装

版本数

在 OpenClaw 中安装

/install remote-desktop-support

功能描述

Create short-lived browser-based remote desktop support links with local-only VNC/Guacamole/noVNC and outbound tunnels.

使用说明 (SKILL.md)

Remote Desktop Support

Use when Ric asks for temporary browser-based access to this machine's desktop for troubleshooting.

Safety Contract

Default to preflight/status unless Ric explicitly asks to open access.
Never create permanent inbound firewall/router exposure.
Bind Guacamole to 127.0.0.1; public access must be via a short-lived outbound tunnel. GNOME current-session VNC may bind widely, so it must use a firewalld-blocked port (1024) and pass the script safety check.
Hard requirement: access must show the current live desktop session. Do not use headless/fresh desktop sessions as a substitute.
Default mode is view-only; keyboard/mouse control requires explicit wording like "control".
Every open session must have a TTL and cleanup path.
Do not leave credentials, tunnels, current-session GNOME VNC backend, or containers running after close.
Do not run install, open, or uninstall --purge from ambiguous/unauthorized group chatter.

Commands

Run scripts from this skill directory:

python3 {baseDir}/scripts/remote_support.py preflight
python3 {baseDir}/scripts/remote_support.py status
python3 {baseDir}/scripts/remote_support.py install --dry-run
python3 {baseDir}/scripts/remote_support.py open --ttl 10m --mode view-only --dry-run
python3 {baseDir}/scripts/remote_support.py open --ttl 10m --mode view-only --unlock-current-session --one-click-only
python3 {baseDir}/scripts/remote_support.py link
python3 {baseDir}/scripts/remote_support.py close
python3 {baseDir}/scripts/remote_support.py uninstall --dry-run

open must prove the backend is the current live desktop before exposing a public tunnel. Headless RDP/Xvfb-style fresh sessions are blockers, not acceptable fallbacks. If the current session is locked, open refuses unless Ric explicitly approved --unlock-current-session.

Workflow

Run preflight and inspect missing dependencies / risks.
If Ric approves setup, run install --dry-run, then install only missing local assets.
Run status before any open attempt.
Open with a short TTL, view-only unless Ric asked for control.
In Discord, use --one-click-only and send only the one_click_url; it embeds a short-lived Guacamole token, so treat it like a password.
On completion or expiry, run close and verify status reports closed.

See references/security-model.md for the threat model and rollback rules.

安全使用建议

Install only if you specifically want this machine's live GNOME desktop to be reachable by a temporary browser link. Use dry-run and preflight first, keep view-only unless control is necessary, treat one-click URLs like passwords, verify close/status after use, and avoid using it where disabling lock or relying on a public tunnel is unacceptable.

能力评估

⚠ Purpose & Capability

The core behavior matches the stated remote desktop support purpose, but it is high-impact: it can expose the current live desktop session, optionally allow control, generate one-click password-equivalent links, and use a public Cloudflare tunnel.

⚠ Instruction Scope

The instructions say to default to preflight and require explicit approval for opening access, control mode, and unlocking, but the executable open command itself has no mandatory confirmation gate or just-in-time warning once invoked.

ℹ Install Mechanism

Install pulls mutable latest Podman images for Guacamole, guacd, and cloudflared, creates a Podman network, and writes local runtime state; it does not declare an auto-starting service during install.

⚠ Credentials

The script temporarily disables idle locking, can unlock the active GNOME session with a flag, enables GNOME VNC on port 1024, sets VNC encryption to none, and relies on Guacamole plus an outbound tunnel and firewall checks for containment.

⚠ Persistence & Privilege

The skill stores session state and credentials under ~/.openclaw/remote-support, starts containers, and schedules cleanup with systemd-run, but if scheduling fails it still opens the session with expiry_method none and relies on manual close.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install remote-desktop-support
安装完成后，直接呼叫该 Skill 的名称或使用 /remote-desktop-support 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.1.0

Initial Linux GNOME/Guacamole short-lived browser support link skill

元数据

Slug remote-desktop-support

版本 0.1.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题