← 返回 Skills 市场
wesley dashboard builder
作者
Wesley Armando
· GitHub ↗
· v1.0.0
· MIT-0
355
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install wesley-dashboard-builder
功能描述
Skill de création de dashboards live, sites web complets, et pages de preuve sociale pour Wesley-Agent. Déclencher dès que Georges mentionne : dashboard, sit...
安全使用建议
Do not blindly run the shell/ssh/docker/cloudflared commands in the docs. Before installing or following these steps: 1) Confirm you (or your organization) own and control the VPS IP, container name, and workspace paths referenced (72.62.30.28, openclaw-yyvg-...). 2) If you do not control that host, do not scp/ssh or apply the docker-compose/systemd changes — they would deploy code to a third-party machine. 3) Treat TELEGRAM_BOT_TOKEN as a secret: use a bot with minimal scope, rotate the token if it was exposed, and avoid sending tokens to remote machines whose ownership is unclear. 4) Review any suggested CORS and pip install commands (they can open services to the web or modify container internals); prefer limiting CORS origins and use vetted package installs. 5) If you want only local dashboard generation, ignore the hard-coded deployment steps and host the generated files on infrastructure you control (local machine, your VPS, or a trusted cloud bucket). If you need a final judgment about safety for your environment, provide whether you control the referenced VPS and whether you intend the agent to run commands on your host.
功能分析
Type: OpenClaw Skill
Name: wesley-dashboard-builder
Version: 1.0.0
The skill bundle contains hardcoded infrastructure details and deployment instructions that direct the AI agent to interact with a specific remote IP address (72.62.30.28) and a Cloudflare tunnel (truth-demonstrate-restore-calgary.trycloudflare.com). Specifically, DEPLOYMENT.md and SKILL.md provide explicit commands for the agent to transfer files via scp and execute docker commands on this remote host. While these appear to be part of a specialized template for a specific project ('Wesley'), the inclusion of fixed external targets in the agent's instructions poses a high risk of data exfiltration and unauthorized remote access if used in a different environment.
能力评估
Purpose & Capability
Requesting TELEGRAM_BOT_TOKEN and TELEGRAM_CHAT_ID is coherent with the skill's photo-upload and Telegram integration. However, the documentation also repeatedly references a specific VPS IP, container name, and workspace paths (72.62.30.28, openclaw-yyvg-...), which is unexpected for a generic dashboard-builder skill and suggests either embedded vendor-specific deployment steps or possibly instructions targeted at a particular remote environment.
Instruction Scope
SKILL.md includes operational commands that modify remote infrastructure: scp/ssh to [email protected], docker cp/exec, editing docker-compose.yml, creating cloudflared tunnels and writing credentials under /root/.cloudflared, and adding systemd/autostart scripts. Those instructions go well beyond generating HTML/CSS/JS and require high privileges on a host; they could be dangerous if you do not control the referenced VPS. The skill also instructs enabling permissive CORS (CORS(app, origins=['*'])) and installing packages with --break-system-packages — both high-impact ops that should be reviewed.
Install Mechanism
No install spec and no code files are present — the skill is instruction-only, which minimizes direct supply-chain risk (nothing is auto-downloaded or written by an installer). The security surface is therefore the instructions themselves rather than any bundled executable code.
Credentials
The only required environment variables are TELEGRAM_BOT_TOKEN (primary) and TELEGRAM_CHAT_ID, which are proportionate to the stated Telegram upload/display functionality. Reminder: Telegram bot tokens grant broad control over the bot and should be treated as sensitive secrets; the skill's docs also suggest using that token to upload/receive media and to share links, which is consistent but sensitive.
Persistence & Privilege
While the skill itself is not marked always:true, its instructions explicitly direct creation of persistent services (auto-start scripts, docker-compose changes, cloudflared tunnels, and permanent credentials files under /root). That operational guidance asks the user to create persistent privileges on the target host and expose local services to the public internet — actions that carry significant security and persistence implications if performed against a host you do not own or fully control.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install wesley-dashboard-builder - 安装完成后，直接呼叫该 Skill 的名称或使用
/wesley-dashboard-builder触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
wesley-dashboard-builder 1.0.0 – Initial release with full web dashboard generation and deployment workflow.
- Creates live dashboards, full websites, and social proof pages for Wesley-Agent, with mobile-first, multi-screen HTML/CSS/JS output.
- Integrates real-time API data and optional Telegram bot uploads for photo galleries.
- Produces self-contained files (all inline, no local dependencies) ready for instant VPS deployment via Cloudflare tunnel.
- Outlines standard project structure, screen types, and design/coding rules (dark theme, fallback data, navigation).
- Step-by-step instructions provided for dashboard creation, API integration, media usage, and deployment.
- Includes detailed checklists to ensure quality and functionality before delivery.
元数据
常见问题
wesley dashboard builder 是什么？
Skill de création de dashboards live, sites web complets, et pages de preuve sociale pour Wesley-Agent. Déclencher dès que Georges mentionne : dashboard, sit... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 355 次。
如何安装 wesley dashboard builder？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install wesley-dashboard-builder」即可一键安装，无需额外配置。
wesley dashboard builder 是免费的吗？
是的，wesley dashboard builder 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
wesley dashboard builder 支持哪些平台？
wesley dashboard builder 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 wesley dashboard builder？
由 Wesley Armando（@georges91560）开发并维护，当前版本 v1.0.0。
推荐 Skills