Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Claw Desktop Pet - Enterprise-grade 7x24 AI Assistant

v1.3.0

Enterprise-grade 24/7 desktop AI assistant with system-level fault tolerance, auto-restart, performance monitoring, intelligent voice, and resource optimizat...

4· 1.6k·1 current·3 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for kk43994/claw-desktop-pet.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Claw Desktop Pet - Enterprise-grade 7x24 AI Assistant" (kk43994/claw-desktop-pet) from ClawHub.
Skill page: https://clawhub.ai/kk43994/claw-desktop-pet
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install claw-desktop-pet

ClawHub CLI

Package manager switcher

npx clawhub@latest install claw-desktop-pet
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
Name and SKILL.md describe an Electron + Node + Python (Edge TTS) desktop assistant that requires npm, node/electron and pip; but the skill metadata declares no required binaries, no install spec, and no environment requirements. The lack of declared runtime requirements (npm/node/pip/Electron) is inconsistent with the claimed purpose.
Instruction Scope
SKILL.md instructs cloning a GitHub repo, running npm install, pip install edge-tts, editing local JS files, and tailing logs — all expected for a desktop app. The instructions do not request cloud credentials or obviously exfiltrate data, but they do instruct running external code and modifying local files (including wiring to OpenClaw on localhost:18788), which increases risk if you run them without review.
Install Mechanism
There is no install spec in the registry (instruction-only). The README/quickstart expects you to git clone and run npm/pip. Downloading and running code from the linked GitHub repo is normal for open-source projects but is higher-risk than an audited package; the skill metadata does not surface this fact, which is an inconsistency to be aware of.
Credentials
The skill does not request environment variables, credentials, or config paths in the registry metadata. SKILL.md references a local OpenClaw port (18788) and local log files, which is reasonable for a desktop integration and does not by itself require secrets.
Persistence & Privilege
always is false and the skill is user-invocable with normal autonomous invocation allowed. It does not request persistent privileges in the registry metadata. Runtime usage (installing an app that auto-restarts) will of course create persistent local processes, but that behavior is in the app instructions rather than the registry privileges.
What to consider before installing
This skill is instruction-only and tells you to clone and run an external GitHub project (npm install, pip install edge-tts, npm start) and edit local files to integrate with OpenClaw on localhost:18788. The registry metadata should have listed required binaries and the fetching/installation step but did not — that's the core inconsistency. Before installing: 1) review the GitHub repository and source code yourself (or have someone you trust do it); 2) inspect any npm/pip dependencies for malicious packages; 3) avoid running installs as administrator and consider running inside a VM or sandbox first; 4) verify the app's behavior around automatic restarts/logging and that it does not open unexpected network connections; 5) confirm the OpenClaw integration (port 18788) is intended for your environment. The changelog/metadata contain odd small details (very short development time) that suggest you should be extra cautious. If you want a safer allowlist, ask the author to provide a registry install spec and explicitly declare required binaries and permissions.

Like a lobster shell, security has layers — review code before you run it.

7x24vk97fc40vn9bxebpq95f4bz0hes80qc6faivk97fc40vn9bxebpq95f4bz0hes80qc6fautomationvk97fc40vn9bxebpq95f4bz0hes80qc6fdesktopvk97fc40vn9bxebpq95f4bz0hes80qc6felectronvk97fc40vn9bxebpq95f4bz0hes80qc6flatestvk97fc40vn9bxebpq95f4bz0hes80qc6fmonitoringvk97fc40vn9bxebpq95f4bz0hes80qc6fopenclawvk97fc40vn9bxebpq95f4bz0hes80qc6fstablevk97fc40vn9bxebpq95f4bz0hes80qc6fttsvk97fc40vn9bxebpq95f4bz0hes80qc6fvoicevk97fc40vn9bxebpq95f4bz0hes80qc6f
1.6kdownloads
4stars
1versions
Updated 11h ago
v1.3.0
MIT-0

Claw Desktop Pet

🦞 企业级7×24稳定运行的桌面龙虾智能助手

一个可爱又强大的桌面AI助手,具备企业级的稳定性和智能语音交互能力。

🌟 主要特性

🛡️ 系统级容错

  • 5种错误全捕获:未捕获异常、Promise拒绝、渲染进程崩溃、子进程错误、主进程错误
  • 智能自愈机制
  • 完整错误日志记录

🔄 自动重启

  • 崩溃后自动恢复
  • 真正7×24运行
  • 重启计数和统计

📊 性能监控

  • 实时健康评分
  • CPU和内存监控
  • 异常告警
  • 性能指标记录

🎙️ 智能语音

  • 口语化自然播报
  • 情境化表达
  • 优先级管理
  • Edge TTS支持

📝 日志管理

  • 自动轮转
  • 大小限制
  • 完整可观测
  • 结构化日志

🧹 资源优化

  • 自动清理缓存
  • 日志文件管理
  • 内存优化

🚀 快速开始

安装

# 克隆项目
git clone https://github.com/kk43994/claw-desktop-pet.git
cd claw-desktop-pet

# 安装依赖
npm install
pip install edge-tts

# 启动
npm start

配置

编辑 desktop-bridge.js 配置OpenClaw集成:

const OPENCLAW_PORT = 18788;
const VOICE_ENABLED = true;

💡 使用场景

  • 需要24小时稳定运行的桌面助手
  • OpenClaw用户寻找桌面客户端
  • 想要可视化AI交互界面
  • 需要语音播报功能的开发者
  • 喜欢桌面宠物的用户

📚 文档

🔧 技术栈

  • 前端: Electron
  • 后端: OpenClaw + Node.js
  • 语音: Edge TTS + Python
  • 平台: Windows 10/11

📊 项目统计

  • 版本: v1.3.0
  • 代码: ~6000行
  • 文档: 6份技术文档
  • 测试: 5个测试脚本
  • 许可证: MIT

🤝 贡献

欢迎提Issue和PR!

📄 许可证

MIT © kk43994


Made with ❤️ and 🦞

Comments

Loading comments...