← 返回 Skills 市场

WebClaw

Name: WebClaw
Author: mailnike

作者 Nikhil Jathar · GitHub ↗ · v2.1.3 · MIT-0

linux ✓ 安全检测通过

939

总下载

当前安装

版本数

在 OpenClaw 中安装

/install webclaw

功能描述

Web dashboard for OpenClaw. Browser-based UI for any installed skill. Schema-driven rendering, JWT auth, RBAC, AI chat, real-time updates. Install web dashbo...

安全使用建议

This skill appears to do what it says: install and manage a local web dashboard. Before installing, consider: 1) It requires sudo and will modify /etc/nginx, systemd services, and create files under your home directory — run on a server or VM you control, not a sensitive host. 2) The installer clones and executes code from GitHub at tag v2.1.0 (pip/npm install and an optional init_webclaw_db.py imported at runtime) — verify the GitHub repo and release tag if you need stronger assurance. 3) The skill will run certbot and expects a domain pointing to the server for Let's Encrypt; otherwise it installs a self-signed cert. 4) No external API keys or secrets are requested by the skill, but its actions run privileged system commands via sudo; review templates (nginx/systemd) and init scripts if you require stricter auditing. Recommended: test installation in an isolated environment (VM/container), inspect the referenced release tag on GitHub, and back up any existing nginx/systemd configs before proceeding.

功能分析

Type: OpenClaw Skill Name: webclaw Version: 2.1.3 The webclaw skill bundle is a legitimate infrastructure component designed to provide a web-based UI for OpenClaw. It utilizes a standard web stack (FastAPI, Next.js, Nginx) and requires elevated privileges (sudo) to configure system services and SSL via Certbot, which is consistent with its stated purpose. The code follows security best practices, including regex-based domain validation in `scripts/db_query.py` to prevent injection, secure password hashing (PBKDF2), and parameterized database queries. While it fetches source code from a GitHub repository during installation, this is transparently documented and pinned to a specific release tag (v2.1.0).

能力评估

✓ Purpose & Capability

Name/description (web dashboard, JWT, RBAC, SSL) match the code and scripts: install.sh, db_query.py, and check_deps.sh all implement installing a web app, building frontend/backend, configuring nginx, systemd, and SSL. Required binaries (python3, node, npm, nginx, certbot, git, sudo) are reasonable and expected for this functionality.

ℹ Instruction Scope

SKILL.md and scripts instruct the agent to clone the project from GitHub, create a venv, pip/npm install and build, initialize a local SQLite DB, write nginx configs, and create systemd services. These steps read/write system paths (e.g., /etc/nginx, /etc/systemd, ~/.openclaw/webclaw) and run commands via sudo — expected for an installer, but they grant the skill the ability to modify system network and service configuration. The db init path may execute an init_webclaw_db.py module from the cloned source (importlib.exec_module), so code pulled from GitHub runs during initialization; this is coherent but worth reviewing before install.

ℹ Install Mechanism

This is an instruction-only skill (no formal install spec), but scripts perform network operations: git clone from GitHub (pinned tag v2.1.0), pip install (requirements.txt), and npm build. Using GitHub releases/tag is reasonable and traceable; no obscure download URLs or extract-from-arbitrary-URL patterns were observed. The script runs system-level changes (nginx/sites-enabled, /etc/ssl, systemd) which is expected for a web-service installer.

✓ Credentials

No required environment variables or credentials are declared; only an optional WEBCLAW_DOMAIN is referenced. The binary and privilege requirements (sudo, certbot) align with the need to manage TLS and system services. No unrelated cloud credentials or secrets are requested.

ℹ Persistence & Privilege

The installer creates persistent systemd services and nginx configs and writes a local SQLite DB — behavior consistent with installing a long-running web dashboard. always:false (not force-installed) and normal model invocation mean the skill is not automatically forced into every agent run. However, the skill requires sudo during install and uses sudo in runtime actions (certbot, nginx reload, systemctl), so installing or invoking its actions will perform privileged changes.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install webclaw
安装完成后，直接呼叫该 Skill 的名称或使用 /webclaw 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v2.1.3

- Added support for setting a specific password during the "reset-password" action (`--password` argument). - Documentation updated to show that "reset-password" can now accept a custom password in addition to generating a random one. - Updated installation instructions to clone the application code from GitHub at release tag `v2.1.0` (was `v1.0.10` previously).

v2.1.2

- Added ERP company setup notes to clarify that all company/demo data setup is handled via the erpclaw skill, not webclaw. - Provided step-by-step instructions for initializing and setting up a company with erpclaw. - Warned against directly importing webclaw Python modules; advised use of service actions or API instead. - No core functionality or action changes to webclaw itself.

v2.1.1

- Added CONTRIBUTING.md and LICENSE.txt files to the project. - Updated installation instructions to reference application code from GitHub at release tag v1.0.10 (was v2.0.0). - No functional or API changes in this version.

v2.1.0

Bug fixes, v2 sync

v1.0.16

2.0.0 is a major release with an updated, pinned application source version. - Application code source updated to release tag v2.0.0 (previously v1.0.10) - No changes to commands, features, or documentation content - Recommended for all users to receive latest updates and fixes

v1.0.15

No user-visible changes in this release. - Version bumped to 1.0.15; no file changes detected. - All features and documentation remain unchanged from the previous release.

v1.0.14

No user-visible changes in this release. - Version bump from 1.0.11 to 1.0.14 - No updates to content, features, or documentation detected

v1.0.13

- Supply chain and install process clarified: application now clones from a specific tagged release (v1.0.10) on GitHub, not HEAD. - pip and npm dependencies are explicitly installed from standard registries in an isolated virtual environment. - Temporary passwords created by `create-user` and `reset-password` actions are output to the bot for secure relay and must be changed at first login. - Metadata updated to allow `WEBCLAW_DOMAIN` as an optional environment variable for customization.

v1.0.12

- Updated setup instructions: now explicitly tell users to open https://YOUR_SERVER/setup to create their admin account after installation. - Clarified initial setup steps and made the setup process more prominent for first-time users. - No code or functionality changes; documentation update only.

v1.0.11

v1.0.10

**Note:** No source code changes, only documentation updated. - Clarified in SKILL.md that the ClawHub package contains only metadata and scripts; the full application is cloned from GitHub post-install. - Added note that git and internet access are required on the target server for the full install. - No changes to commands, features, or configuration.

v1.0.9

v1.0.8

No changes were detected in this release. - Version bumped from 1.0.5 to 1.0.8 with no file or documentation updates. - No new features, bug fixes, or enhancements introduced in this version.

v1.0.7

No file changes detected between versions 1.0.5 and 1.0.7. - No updates or modifications found in this release. - All features and documentation remain unchanged.

v1.0.6

No changes detected in this release. - Version number updated to 1.0.6; all other content remains unchanged from the previous release.

v1.0.5

webclaw 1.0.5 is a version bump with no code or SKILL.md content changes. - Version updated from 1.0.3 to 1.0.5. - No functional, documentation, or file changes detected.

v1.0.4

- Updated homepage URL to https://www.erpclaw.ai. - Added "git" and "sudo" as installation requirements in the metadata. - Clarified that installation requires sudo for nginx, systemd, certbot, and git operations. - Noted that the source repo is cloned from GitHub on first install. - Version updated to 1.0.3.

v1.0.3

- Major cleanup: removed 103 files related to backend, frontend, and configuration. - No functional or interface changes described in documentation. - Likely transition to minimal or placeholder state for the skill.

v1.0.2

Full publish with API, frontend, templates, and install scripts

v1.0.1

- Major update: All source files have been removed from the repository in this version. - 104 files deleted, including backend (API, database, auth), frontend (web assets, configs), middleware, and supporting scripts. - No changes to the SKILL.md documentation or public interface description. - This update effectively makes the skill non-functional by removing its implementation code.

元数据

Slug webclaw

版本 2.1.3

许可证 MIT-0

累计安装 4

当前安装数 4

历史版本数 21

常见问题

WebClaw 是什么？

Web dashboard for OpenClaw. Browser-based UI for any installed skill. Schema-driven rendering, JWT auth, RBAC, AI chat, real-time updates. Install web dashbo... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 939 次。

如何安装 WebClaw？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install webclaw」即可一键安装，无需额外配置。

WebClaw 是免费的吗？

是的，WebClaw 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

WebClaw 支持哪些平台？

WebClaw 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（linux）。

谁开发了 WebClaw？

由 Nikhil Jathar（@mailnike）开发并维护，当前版本 v2.1.3。