Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Clawbridge

FSecurity

<skill> <id>clawbridge</id> <name>ClawBridge Dashboard</name>

14 stars
0 votes
0 copies
1 views
Added 9/7/2026
databashnodegitapidocumentation

Works with

terminalapi

Security Analysis

F17/100
criticalPipes output to a shell interpreter
mediumUses curl or wget to download content
criticalExfiltrates credentials via HTTP — exact pattern from Snyk ToxicSkills study
criticalDownloads and executes remote scripts — classic supply chain attack

Scanned 9/7/2026

Install to Claude Code

$npx -y skills add modbender/skill-library-mcp --skill clawbridge --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Clawbridge?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Clawbridge
[![Security: F — Skills Directory](https://www.skillsdirectory.com/api/skills/modbender-clawbridge/badge)](https://www.skillsdirectory.com/skills/modbender-clawbridge)

More formats (shields.io, HTML) on the badges page.

Download with Pro
Files
SKILL.md
---
name: ClawBridge Dashboard
description: <skill> <id>clawbridge</id> <name>ClawBridge Dashboard</name>
  <version>1.0.0</version> <description>Mobile-first mission control for
  OpenClaw agents. Runs as a local Node.js sidecar process, provid...
---

<skill>
  <id>clawbridge</id>
  <name>ClawBridge Dashboard</name>
  <version>1.0.0</version>
  <description>Mobile-first mission control for OpenClaw agents. Runs as a local Node.js sidecar process, providing a web dashboard to monitor real-time agent activity, track token costs across 340+ models, and trigger cron tasks remotely. Optionally creates an outbound-only Cloudflare tunnel for remote access.</description>
  <author>DreamWing</author>
  <homepage>https://clawbridge.app</homepage>
  <license>MIT</license>
  <tags>dashboard,monitoring,mobile,ui,control-panel,cost-tracking,cloudflare,tunnel</tags>

  <!-- What this skill installs and runs -->
  <runtime>
    <type>node</type>
    <entrypoint>index.js</entrypoint>
    <persistence>Registers a user-level systemd service (clawbridge.service) that auto-starts on login and restarts on failure.</persistence>
  </runtime>

  <!-- System requirements -->
  <requires>
    <dependency name="node" version=">=18" required="true" />
    <dependency name="npm" version=">=9" required="true" />
    <dependency name="git" version="any" required="false" description="Used for incremental updates; falls back to tarball download if absent." />
    <dependency name="cloudflared" version="latest" required="false" description="Downloaded automatically from github.com/cloudflare/cloudflared if Cloudflare tunnel is enabled. Only required if using remote access without a VPN (Tailscale/WireGuard)." />
  </requires>

  <!-- Credentials / environment variables written to .env -->
  <credentials>
    <env name="ACCESS_KEY" description="Randomly generated 32-character hex key used to authenticate dashboard logins. Auto-generated on first install." required="true" generated="true" />
    <env name="PORT" description="Local TCP port the dashboard listens on. Defaults to 3000, auto-incremented if busy." required="false" default="3000" />
    <env name="TUNNEL_TOKEN" description="Cloudflare Tunnel token for a permanent named tunnel. Optional — omit to use a temporary Quick Tunnel instead." required="false" />
    <env name="ENABLE_EMBEDDED_TUNNEL" description="Set to 'true' when a Cloudflare tunnel (permanent or quick) is active." required="false" />
    <env name="OPENCLAW_PATH" description="Absolute path to the openclaw binary. Auto-detected from PATH; only written to .env if found." required="false" />
  </credentials>

  <!-- Network activity -->
  <network>
    <connection purpose="Dependency install" destination="registry.npmjs.org" direction="outbound" trigger="install/update" />
    <connection purpose="Source code download" destination="github.com/dreamwing/clawbridge" direction="outbound" trigger="install/update" />
    <connection purpose="cloudflared binary download" destination="github.com/cloudflare/cloudflared" direction="outbound" trigger="install (only if tunnel enabled and cloudflared not found)" />
    <connection purpose="Cloudflare Tunnel relay" destination="*.cloudflareaccess.com, *.trycloudflare.com" direction="outbound" trigger="runtime (only if tunnel enabled)" />
    <connection purpose="Dashboard UI" destination="localhost" direction="inbound" trigger="runtime" />
  </network>

  <!-- File system paths written or modified -->
  <filesystem>
    <path type="write" location="skills/clawbridge/.env" description="Stores ACCESS_KEY, PORT, and optional tunnel config." />
    <path type="write" location="skills/clawbridge/data/" description="Stores local agent log and token usage analytics." />
    <path type="write" location="~/.config/systemd/user/clawbridge.service" description="User-level systemd service unit for auto-start." />
    <path type="write" location="skills/clawbridge/cloudflared" description="cloudflared binary, only if downloaded during tunnel setup." />
  </filesystem>

  <!-- Installation — uses the script bundled in this repository -->
  <install>
    curl -sL https://raw.githubusercontent.com/dreamwing/clawbridge/master/install.sh | bash
  </install>

  <instructions>
    ClawBridge installs itself as a persistent background service.

    After installation, the dashboard is accessible at the local IP shown in the terminal output.
    An ACCESS_KEY is generated and displayed — keep it safe, it is required to log in.

    To enable remote access (optional), supply a Cloudflare Tunnel token when prompted,
    or leave it blank to use a temporary Quick Tunnel URL.

    To update to the latest version:
      curl -sL https://raw.githubusercontent.com/dreamwing/clawbridge/master/install.sh | bash

    To stop the service:
      systemctl --user stop clawbridge

    Full documentation: https://github.com/dreamwing/clawbridge/blob/master/README.md
  </instructions>
</skill>

# ClawBridge Dashboard

**Your Agent. In Your Pocket.**

ClawBridge is a lightweight, mobile-first web dashboard for OpenClaw. It runs as a local sidecar process and provides:

*   🧠 **Live Activity Feed**: Watch agent execution and thinking in real-time via WebSocket.
*   💰 **Token Economy**: Track costs across 340+ models with daily/monthly breakdowns.
*   🚀 **Mission Control**: Trigger cron jobs manually from your phone.
*   🔒 **Secure by Default**: API key auth, session cookies, and optional Cloudflare Tunnel for remote access.

## What This Skill Does

1. **Installs** the ClawBridge Node.js app from GitHub into `skills/clawbridge/`
2. **Generates** a random `ACCESS_KEY` and writes it to `.env`
3. **Registers** a user-level systemd service for auto-start
4. **Optionally downloads** `cloudflared` and configures a tunnel for remote access

## Installation

```bash
curl -sL https://raw.githubusercontent.com/dreamwing/clawbridge/master/install.sh | bash
```

See [README.md](https://github.com/dreamwing/clawbridge/blob/master/README.md) for full documentation.

Attribution

modbendermodbender
View sourceMore from modbender →
SSkills DirectorySkills Directory

Know which skills are safe — weekly.

Best new skills + every skill we flagged as malicious. From the team that scanned 103,619.

Join free

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Know which skills are safe — weekly.

Best new skills + every skill we flagged as malicious. From the team that scanned 103,619.

Join free

Related Skills

Rank Tracker

This skill helps you track, analyze, and report on keyword ranking positions over time. It monitors both traditional SERP rankings and AI/GEO visibility to provide comprehensive search performance insights.

1821 votes

Youtube Competitor Analyzer

Find and analyze YouTube competitor channels using YouTube Data API v3. Discover competitors through keyword search, category matching, content similarity, and related channel discovery. Compare metrics, content strategies, and market positioning. Use when users want to (1) Find competitors for their YouTube channel, (2) Analyze competitor performance metrics, (3) Compare their channel against competitors, (4) Identify content gaps and opportunities, (5) Benchmark against similar creators, (6...

31 votes

Twitter Algorithm Optimizer

Analyze and optimize tweets for maximum reach using Twitter's open-source algorithm insights. Rewrite and edit user tweets to improve engagement and visibility based on how the recommendation system ranks content.

742580 votes

Weather Fetcher

Instructions for fetching current weather temperature data for Karachi, Pakistan from wttr.in API

663750 votes

Weather

Get current weather and forecasts (no API key required).

484900 votes
View all in data →