Flux

v2.3.0

Publish events and query shared world state via Flux state engine. Use when agents need to share observations, coordinate on shared data, or track entity sta...

2· 1.5k·5 current·5 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (publish/query Flux world state) align with the included files and script: the bash CLI calls the Flux HTTP endpoints. Required credential FLUX_TOKEN and optional FLUX_ADMIN_TOKEN match documented API usage. Minor mismatch: SKILL.md / README say curl (and jq/python) are required/used but the registry metadata does not list required binaries.
Instruction Scope
SKILL.md instructs the agent to call the provided flux.sh script for publish/get/list/delete/admin actions and to contact the documented Flux API endpoints. The script only uses FLUX_* env vars and standard utilities (curl, jq, python3). It also exposes a directory endpoint that lists namespaces/entities (which may reveal global state across tenants on the public instance) — this is expected for a discovery feature but worth awareness.
Install Mechanism
No install spec; skill is instruction/script-only. No downloads or archive extraction. Script is included in the bundle so nothing external is fetched by the installer.
Credentials
Only FLUX_TOKEN is required (primaryEnv). FLUX_ADMIN_TOKEN and FLUX_URL are optional and justified by admin actions and local override. This is proportionate. Note: the skill will send requests to the default external host https://api.flux-universe.com — ensure you trust that service before providing credentials.
Persistence & Privilege
always is false and the skill does not request persistent platform-level privileges. It does not modify other skills or system-wide config. The agent may invoke the skill autonomously (normal default).
Assessment
This skill is a straightforward CLI wrapper for a Flux HTTP API and appears to do what it says. Before installing: (1) Confirm you trust the external endpoint (https://api.flux-universe.com) before setting FLUX_TOKEN there; the token grants API access. (2) Only provide FLUX_ADMIN_TOKEN if you need to run admin updates — it's a higher-privilege credential. (3) Ensure the runtime has curl and either jq or python3 (the script uses them but the package metadata didn't declare required binaries). (4) Be aware the skill can list namespaces/entities (discovery); avoid sharing tokens that span tenants if you need strict isolation.

Like a lobster shell, security has layers — review code before you run it.

latestvk977zjbntnfzqz68zwx5tf727d81xxfc

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

Clawdis
EnvFLUX_TOKEN
Primary envFLUX_TOKEN

Comments