← 返回 Skills 市场
Web Claw
作者
Nikhil Jathar
· GitHub ↗
· v2.0.1
· MIT-0
318
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install web-claw
功能描述
Web dashboard for OpenClaw. Browser-based UI for any installed skill. Schema-driven rendering, JWT auth, RBAC, AI chat, real-time updates. Install web dashbo...
安全使用建议
This skill is internally consistent with its description, but it will perform system-level changes: it clones code from GitHub (pinned tag v2.1.0), installs packages into a venv, builds frontend assets with npm, writes nginx/site configs and systemd service units, and enables persistent services. Before installing: (1) verify and review the upstream GitHub release tag and templates (nginx/systemd) to ensure you trust the source; (2) be prepared to run with sudo and to restore/backup nginx and systemd configs if needed; (3) ensure DNS for any domain you plan to use points to the server before running certbot; (4) if you run other OpenClaw skills, note webclaw may import a shared erpclaw lib under ~/.openclaw — this is optional but examine it if present. If uncertain, test in a VM or isolated host first.
功能分析
Type: OpenClaw Skill
Name: web-claw
Version: 2.0.1
The web-claw skill bundle is a legitimate infrastructure component designed to provide a web-based dashboard for OpenClaw. While it requires elevated privileges (sudo) to configure Nginx, systemd services, and SSL certificates via Certbot, these actions are consistent with its stated purpose. The code demonstrates security awareness, such as using a regex to validate domain inputs against shell injection in `scripts/db_query.py` and employing PBKDF2-HMAC-SHA256 for password hashing. No evidence of data exfiltration, malicious prompt injection, or unauthorized persistence was found.
能力评估
Purpose & Capability
The skill claims to install and run a web dashboard and the included assets match that purpose: nginx, certbot, python, node/npm, systemd services, a local SQLite DB, and a pinned GitHub clone are all expected for this functionality.
Instruction Scope
SKILL.md directs running check_deps.sh and install.sh which perform network fetches (git clone of a pinned release tag), install Python/npm deps, initialize a local SQLite DB, and write nginx/systemd configs. db_query.py also reads/writes the local DB and may import an erpclaw shared library from ~/.openclaw/erpclaw/lib if available — this is a cross-skill shared-lib usage (fallbacks exist). All actions are within the dashboard's scope but because they touch system config and other OpenClaw paths, review is advised.
Install Mechanism
There is no platform package install spec; installation is driven by included scripts which clone the repo from GitHub (https://github.com/avansaber/webclaw at tag v2.1.0), create a venv, run pip/npm, and write files into /etc and systemd. Using a pinned GitHub tag reduces risk, but the installer does fetch and execute code from the network and will write system-wide configs.
Credentials
The skill does not request secrets or external API keys. It exposes an optional WEBCLAW_DOMAIN env var and uses SUDO_USER and the current user's home for paths — these are reasonable for a service installer. db_query.py inspects /etc/nginx/sites-enabled/webclaw and ~/.openclaw for local data, which aligns with its management role.
Persistence & Privilege
The installer requires sudo and will create/enable systemd services and nginx configs (persistent, system-wide presence). This is expected for a web service but is a high-privilege operation — ensure you are prepared for system-level changes.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install web-claw - 安装完成后,直接呼叫该 Skill 的名称或使用
/web-claw触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.0.1
**Major change: Streamlined packaging, clarified responsibilities, and reduced included files.**
- Removed nearly all application code; only retains metadata and guidance files, moving full app code retrieval to install-time clone from GitHub.
- Added clear note that ERP setup and data management are handled by the erpclaw skill, not webclaw.
- Actions remain the same, but reset-password now documents the ability to set a custom password.
- Installation and privilege requirements simplified and clarified.
- Only includes CONTRIBUTING.md as an onboard doc; all core files now fetched during install.
v2.0.0
**Major upgrade: Web dashboard for OpenClaw with secure, browser-based UI, real-time updates, and robust administration features.**
- Introduces a full-featured dashboard with schema-driven UI, JWT auth, RBAC, audit logging, and AI chat for all installed skills.
- Secure HTTPS setup via Let's Encrypt, enforced through nginx reverse proxy.
- User and role management: Create users, assign roles, reset passwords, and configure permissions with CLI or web triggers.
- Real-time updates, proactive suggestions, and rate limiting for enhanced security and usability.
- Installs full app (API + Next.js frontend) from a pinned GitHub release; all data stored locally in SQLite.
- Includes comprehensive documentation for setup, usage commands, technical architecture, and per-skill UI extensions.
元数据
常见问题
Web Claw 是什么?
Web dashboard for OpenClaw. Browser-based UI for any installed skill. Schema-driven rendering, JWT auth, RBAC, AI chat, real-time updates. Install web dashbo... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 318 次。
如何安装 Web Claw?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install web-claw」即可一键安装,无需额外配置。
Web Claw 是免费的吗?
是的,Web Claw 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Web Claw 支持哪些平台?
Web Claw 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(linux)。
谁开发了 Web Claw?
由 Nikhil Jathar(@mailnike)开发并维护,当前版本 v2.0.1。
推荐 Skills