Eo Ability Rag
v1.0.0RAG知识共享能力，跨项目共享专家经验和最佳实践，基于语义搜索快速检索
⭐ 0· 66·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description, and the SKILL.md all describe a RAG-based knowledge-sharing/search capability. There are no unrelated required binaries, env vars, or config paths. References to LanceDB and an 'EO' plugin are consistent with a vector-index/search implementation.
Instruction Scope
Instructions remain within the stated purpose (index/search/share/learn). However the document is high-level and vague about what '自动索引' (automatic indexing) consumes, how data is ingested, and what is persisted. It implies autonomous/background indexing and cross-session persistence, so it's important to confirm what data sources and triggers are used before indexing sensitive information.
Install Mechanism
No install spec and no code files — instruction-only skill. This minimizes disk/writing risk because nothing in the skill will be installed or executed by itself.
Credentials
The skill declares no environment variables or credentials, which is proportionate. It does mention optional use of LanceDB (plugin) or '独立版' simple index; the SKILL.md does not specify whether using LanceDB requires external credentials, endpoints, or storage. Verify what the EO/LanceDB integration requires before enabling it in an environment with sensitive data.
Persistence & Privilege
The skill does not request always:true and is user-invocable. It claims '持续学习' and cross-session persistence; combined with autonomous invocation this implies the agent or plugin may store and update a knowledge base over time. Confirm retention, access controls, and whether shared entries can be exported or visible to other projects.
Assessment
This skill appears coherent and low-risk as provided (instruction-only, no creds). Before installing: confirm what '自动索引' will read (documents, conversations, repos), where the vector DB (LanceDB) would be hosted, and what credentials/storage that plugin needs. Do not allow automatic indexing of sensitive secrets or private files until you know the ingestion sources and retention/ACLs. If you require privacy, ask for explicit details about the storage backend, access controls, and how to delete indexed entries.Like a lobster shell, security has layers — review code before you run it.
latestvk9786v1y3pqhem9nrysys2t7nh84dy7x
License
MIT-0
Free to use, modify, and redistribute. No attribution required.