Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

openclaw omni expert

v1.0.0

OpenClaw全能专家系统;支持多种远程软件(UU/RustDesk/ToDesk/向日葵/RDP)、一键安装、TOP3专家诊断、全自动驾驶、Agent/Workflow编排、工具链配置、记忆系统、插件开发、监控运维、100+实战案例库和故障排查手册;用户说"安装 OpenClaw"、"配置 OpenClaw"...

0· 90·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for thinkbugs/openclaw-omni-expert.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "openclaw omni expert" (thinkbugs/openclaw-omni-expert) from ClawHub.
Skill page: https://clawhub.ai/thinkbugs/openclaw-omni-expert
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install openclaw-omni-expert

ClawHub CLI

Package manager switcher

npx clawhub@latest install openclaw-omni-expert
Security Scan
Capability signals
CryptoRequires walletCan make purchasesRequires OAuth token
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill's code (many scripts) implements the advertised capabilities (UU/RustDesk/ToDesk/SunLogin/RDP control, autopilot, memory/knowledge, workflows). However the registry metadata declares no required binaries while the code expects many external CLI tools (ssh, scp, rustdesk, uu, todesk, sunlogin, anydesk, teamviewer, mstsc, etc.). SKILL.md lists only paramiko as a Python dependency though much of the code uses subprocess to call system binaries. This mismatch between declared requirements and actual runtime needs is an inconsistency.
!
Instruction Scope
SKILL.md and the scripts instruct running local scripts that: connect to remote hosts (via SSH or remote‑desktop CLIs), execute arbitrary commands remotely (uu exec, ssh commands), transfer files (scp, todesk/sunlogin transfer), capture screenshots, and perform automated clicks/keyboard input. The code also reads/writes local config paths (e.g., ~/.openclaw, APPDATA/*/RustDesk/config.toml, ~/.ssh references) and will persist learned cases and possibly credentials. These behaviours go beyond simple 'helper' scope and involve accessing and modifying sensitive local files and running arbitrary commands.
Install Mechanism
There is no remote download/install spec embedded in the registry entry (no external URLs). The skill is delivered as code files included in the package (no installer step shown). That reduces supply‑chain download risk compared to fetching arbitrary payloads at install time.
!
Credentials
The registry declares no required environment variables or primary credential, but the scripts access environment variables (e.g., APPDATA, HOME) and local config files. Some scripts (rustdesk_control.set_password) write passwords into application config files; others attempt to read stored passwords or SSH keys if provided. Requesting or using SSH private keys, reading local app config files, and modifying remote‑desktop configs are sensitive operations that are proportionally large relative to a simple assistant; the skill does not declare these needs up front.
Persistence & Privilege
always:false (no forced inclusion). disable-model-invocation is false (the skill may be invoked autonomously by the agent). Given the skill can initiate remote sessions, run commands, transfer files, and modify local app configs, autonomous invocation increases risk if left unrestricted. This is not a misconfiguration by itself, but it amplifies the impact of the other concerns.
What to consider before installing
This package appears to implement a full remote‑control/autopilot system and will access and persist local configuration (e.g., ~/.openclaw, APPDATA RustDesk config), can read/write passwords and SSH keys (if given), and runs many external CLI commands (ssh, scp, rustdesk, uu, todesk, sunlogin, mstsc, etc.). Before installing or running it: 1) Review the code (especially files like rustdesk_control.py, remote_desktop_control.py, autopilot.py, install_openclaw.sh) to confirm there are no unexpected remote endpoints or hidden uploads; 2) Do not supply real SSH private keys or admin credentials — use throwaway accounts/VMs for testing; 3) Expect the tool to create and modify files under your home directory (learned cases, configs) and possibly append passwords to app config files; 4) If you need to run it, prefer an isolated sandbox or VM and restrict network access until you trust it; 5) Ask the publisher to update the registry metadata to list required binaries and explain precisely what config paths it will read/write and why. These steps will reduce the risk of accidental credential exposure or unintended remote actions.

Like a lobster shell, security has layers — review code before you run it.

latestvk978b92h19mn1jrjhsr8f1x6s584c4zg
90downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

OpenClaw全能专家系统 v7.0

核心能力

能力说明
多远程软件支持UU/RustDesk/ToDesk/向日葵/RDP/WinRM 统一接口
远程桌面控制屏幕捕获、鼠标键盘控制
视觉智能识别GPT-4V/本地OCR、UI元素定位、自动化点击
全自动驾驶一键连接、一键安装、一键诊断、全程无人干预
TOP3 专家第一性原理 + 熵减思维 + 最优路径算法
Agent编排10+ 节点类型、5 种 Workflow 模式
工具链专家10+ 内置工具、自定义工具开发
监控运维日志配置、健康检查、告警、备份
案例库100+ 实战案例
故障库60+ 常见故障

触发条件

  • 用户要求"安装 OpenClaw"、"配置 OpenClaw"
  • 用户要求"诊断 OpenClaw 问题"
  • 用户要求"创建 Agent"或"编排 Workflow"
  • 用户要求"远程控制电脑"、"用鼠标操作"、"帮我点一下"
  • 用户提到具体的远程软件名称(UU、RustDesk 等)

Phase 0: 多远程软件控制

支持的软件对比

┌──────────────────────────────────────────────────────────────────┐
│                     远程软件自动化能力对比                         │
├────────────┬────────┬────────┬────────┬────────┬────────┬───────┤
│ 软件       │ 鼠标   │ 键盘   │ 截图   │ 文件   │ 命令   │ 视觉  │
├────────────┼────────┼────────┼────────┼────────┼────────┼───────┤
│ UU远程     │   ✅   │   ✅   │   ✅   │   ✅   │   ✅   │   ✅  │
│ RustDesk   │   ⚠️   │   ⚠️   │   ✅   │   ✅   │   ✅   │   ✅  │
│ ToDesk     │   ⚠️   │   ⚠️   │   ✅   │   ✅   │   ❌   │   ✅  │
│ 向日葵     │   ⚠️   │   ⚠️   │   ✅   │   ✅   │   ❌   │   ✅  │
│ RDP        │   ❌   │   ❌   │   ✅   │   ✅   │   ✅   │   ✅  │
│ WinRM      │   ❌   │   ❌   │   ❌   │   ✅   │   ✅   │   ❌   │
└────────────┴────────┴────────┴────────┴────────┴────────┴───────┘
✅ 完全支持  ⚠️ 需配合PyAutoGUI  ❌ 不支持

检测已安装软件

# 检测可用的远程软件
python3 scripts/universal_remote.py --detect

输出示例:

已安装:
  - uu
    鼠标控制: ✓
    键盘控制: ✓
    截图: ✓
    文件传输: ✓
    命令执行: ✓
    视觉识别: ✓
  - rustdesk
    鼠标控制: ✗
    键盘控制: ✗
    ...

通用连接方式

# UU 远程
python3 scripts/universal_remote.py --software uu --session-id 123456789

# RustDesk
python3 scripts/universal_remote.py --software rustdesk --remote-id 12345-abc-67890

# ToDesk
python3 scripts/universal_remote.py --software todesk --session-id xxxxxxxx

# 向日葵
python3 scripts/universal_remote.py --software sunlogin --host 192.168.1.100

# RDP
python3 scripts/universal_remote.py --software rdp --host 192.168.1.100

# WinRM
python3 scripts/universal_remote.py --software winrm --host 192.168.1.100 --username admin

Phase 1: UU远程(完整支持)

连接方式

# Session ID 连接
python3 scripts/remote_desktop_control.py --session-id 123456789 --interactive

# 主机连接
python3 scripts/remote_desktop_control.py --host 192.168.1.100 --port 18792 --interactive

鼠标键盘控制

# 移动鼠标
python3 scripts/remote_automation.py --action move --x 500 --y 300

# 点击/双击/右键
python3 scripts/remote_automation.py --action click --x 500 --y 300
python3 scripts/remote_automation.py --action double-click --x 500 --y 300
python3 scripts/remote_automation.py --action right-click --x 500 --y 300

# 输入文本
python3 scripts/remote_automation.py --action type --text "Hello"

# 按键/组合键
python3 scripts/remote_automation.py --action press --key enter
python3 scripts/remote_automation.py --action hotkey --keys ctrl c

Phase 2: RustDesk(开源免费)

安装与配置

# 安装 RustDesk
# Windows: 下载 https://github.com/rustdesk/rustdesk/releases
# Linux: cargo install rustdesk

# 获取本机 ID
python3 scripts/rustdesk_control.py --get-id

# 设置密码
python3 scripts/rustdesk_control.py --set-password MYPASSWORD

连接方式

# 通过 ID 连接
python3 scripts/rustdesk_control.py --id 12345-abcdef-67890 --password MYPASSWORD

# 通过主机连接
python3 scripts/rustdesk_control.py --host 192.168.1.100 --port 21117

# 自建中继服务器
python3 scripts/rustdesk_control.py --id <remote_id> --relay your-relay.com

文件传输

# 上传文件
python3 scripts/rustdesk_control.py --host 192.168.1.100 --upload ./local.txt /tmp/remote.txt

# 下载文件
python3 scripts/rustdesk_control.py --host 192.168.1.100 --download /tmp/remote.txt ./local.txt

Phase 3: 其他远程软件

ToDesk

# CLI 连接
todesk -c <device_id> -p <password>

# 文件传输
todesk -transfer <local> <remote>

向日葵

# CLI 连接
sunlogin --control <host> --pwd <password>

# 文件传输
sunlogin --file <local> <remote>

RDP (Windows 原生)

# 连接
mstsc /v:192.168.1.100

# 带用户名
mstsc /v:192.168.1.100 /u:admin

WinRM (无 GUI)

# 执行远程命令
winrm quickconfig
winrs -r:192.168.1.100 -u:admin -p:password "ipconfig"

# PowerShell 远程
Enter-PSSession -ComputerName 192.168.1.100 -Credential admin

Phase 4: 视觉识别与自动化

屏幕分析与目标定位

# 分析屏幕内容
python3 scripts/vision_recognition.py --image screenshot.png --task "找到下载按钮"

# 描述界面
python3 scripts/vision_recognition.py --image screenshot.png --describe

# 交互模式
python3 scripts/vision_recognition.py --image screenshot.png --interactive

自动化工作流

# 执行工作流
python3 scripts/automation_workflow.py \
    --session-id 123456789 \
    --workflow workflow.json

# 交互模式
python3 scripts/automation_workflow.py \
    --session-id 123456789 \
    --interactive

工作流 JSON 示例:

{
  "name": "软件安装",
  "steps": [
    {"action": "capture"},
    {"action": "find", "target": "安装", "execute": "click"},
    {"action": "wait", "timeout": 5},
    {"action": "find", "target": "下一步", "execute": "click"},
    {"action": "find", "target": "我接受", "execute": "click"},
    {"action": "find", "target": "安装", "execute": "click"},
    {"action": "wait", "timeout": 60},
    {"action": "find", "target": "完成", "execute": "click"}
  ]
}

Phase 5: 全自动驾驶

SSH 一键安装

python3 scripts/autopilot.py \
    --host 192.168.1.100 \
    --username admin \
    --key ~/.ssh/id_rsa \
    --mode install

诊断修复

python3 scripts/expert_diagnose.py --interactive
python3 scripts/troubleshooting.py --diagnose "问题描述"

资源索引

远程控制脚本

脚本功能
scripts/universal_remote.py通用远程控制器(多软件统一接口)
scripts/remote_desktop_control.pyUU 远程控制
scripts/rustdesk_control.pyRustDesk 控制
scripts/remote_automation.pyPyAutoGUI 自动化
scripts/vision_recognition.pyGPT-4V 视觉识别
scripts/automation_workflow.py自动化工作流

其他脚本

脚本功能
scripts/autopilot.py全自动驾驶仪
scripts/expert_diagnose.pyTOP3 专家诊断
scripts/config_expert.py配置专家
scripts/workflow_expert.pyAgent/Workflow 编排
scripts/monitoring_expert.py监控运维
scripts/case_library.py案例库
scripts/troubleshooting.py故障排查

应用场景

场景推荐软件
AI 鼠标点击自动化UU 远程 + PyAutoGUI ✅
开源自托管RustDesk
无 UI 纯命令操作WinRM / PSRemoting
临时快速连接RDP
游戏/高清串流Parsec
企业内网向日葵 / ToDesk

注意事项

  • 多软件共存:可同时安装多种远程软件,根据场景切换
  • API Key:GPT-4V 视觉识别需要 OpenAI API Key
  • 权限:自动化操作可能需要管理员权限
  • 安全:敏感操作前建议备份重要数据

作者信息

项目信息
作者ProClaw
网站www.ProClaw.top
联系方式wechat:Mr-zifang

Comments

Loading comments...