A2a
v1.2.0Agent Interconnect - Discover and invoke other AI Agents. Use when: need cross-platform collaboration, delegate tasks to specialized agents, or build multi-a...
⭐ 0· 236·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (agent interconnect, discover/invoke agents) align with the code and SKILL.md. The code provides Registry, Server, and Client for calling agents over WebSockets, which is expected for this purpose. Requiring python3 only is reasonable.
Instruction Scope
SKILL.md only documents how to register actions, call agents, and discover capabilities. It does not ask the agent to read unrelated files or credentials. The runtime behavior (opening WebSocket connections and sending messages) is consistent with the described function.
Install Mechanism
No install spec (instruction-only) — low risk. However, the Python code imports the third-party 'websockets' package inside Client methods but the SKILL.md and manifest do not declare this dependency; runtime will fail unless 'websockets' is available. No external downloads or unusual installers are used.
Credentials
The skill requests no environment variables, credentials, or config paths. This is proportionate to a networked inter-agent library. There are no hidden env accesses in the code or SKILL.md.
Persistence & Privilege
always is false and the skill does not request special privileges or modify other skills. It does initiate outbound network connections (WebSockets), which is normal for inter-agent communication but increases operational exposure and should be controlled by policy.
Assessment
This skill appears to do what it claims: it provides a small WebSocket-based client/server/registry for calling other agents and does not request secrets. Before installing:
- Understand that it will open outbound WebSocket connections to endpoints you supply; do not point it at untrusted servers because messages could include sensitive data.
- Ensure the Python 'websockets' package is available in the runtime environment (SKILL.md does not declare this dependency). Without it, the client will fail.
- Note minor code issues (e.g., a likely typo/bug in Server.__init__) — the implementation is lightweight but not hardened. If you plan to use it in production, review/patch for input validation, errors, use secure wss:// endpoints, and add authentication/authorization between agents.
- If you need guarantees about data handling or access controls, require those features (TLS, auth tokens, allowed endpoint list) before using this skill in sensitive contexts.Like a lobster shell, security has layers — review code before you run it.
latestvk976b8yamz945zkby8mzfrcyfd830tjt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🔗 Clawdis
Binspython3
