webclaw

What This Skill Does

webclaw is the comprehensive browser-based management interface for OpenClaw. It eliminates the need for terminal-based interaction for daily tasks by providing a dynamic, schema-driven dashboard that auto-configures based on your installed skills. The interface supports forms, data tables, analytical charts, and an embedded AI chat assistant, allowing you to monitor and control your entire agent ecosystem from a centralized web console.

Installation

To install the webclaw dashboard, execute the following command: clawhub install openclaw/skills/skills/mailnike/webclaw.

Note that this installation requires sudo privileges. The skill performs system-level operations including:

1. Nginx configuration for reverse proxying.
2. Systemd service management for API and frontend processes.
3. Automatic SSL provisioning via Certbot.
4. Local database initialization using SQLite.

Once installed, the bot will provide a server URL. Navigate to /setup in your browser to initialize the primary administrator account.

Use Cases

• Unified Administration: Managing all installed OpenClaw skills without interacting with CLI commands.
• User Access Management: Onboarding team members with granular RBAC controls (Admin, Manager, User roles).
• Secure Remote Access: Serving your agent interface over HTTPS with automated certificate renewal.
• Audit Monitoring: Tracking every mutating action performed across the system for security compliance.

Example Prompts

1. "I need to expose the dashboard to the public; please set up SSL for mydomain.com."
2. "Create a new web user account for Bob with a Manager role so he can manage the skills."
3. "Show me the current status of the webclaw dashboard and any pending system alerts."

Tips & Limitations

• Security First: The system utilizes PBKDF2-HMAC-SHA256 for password hashing and enforces 15-minute JWT access tokens. Ensure your server firewall is configured to only allow HTTPS traffic on port 443.
• Authentication: Sessions are stored in httpOnly cookies to prevent XSS-based token theft.
• Limitations: The skill requires a Linux environment with Nginx pre-installed. It is not currently designed for multi-node clusters; all data is contained within a local SQLite instance.