Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
agent-link-local-agent
v1.0.0智能体互联技能 - 支持不同电脑上的 OpenClaw 实例和 Agent 通过中转服务器进行安全可靠的通讯。包含中转服务器组件和本地 Agent 组件。
⭐ 1· 49·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The README/SKILL.md describe both a 'relay server' and a 'local Agent' but the package only contains the local client (scripts/local-agent/agent_link.py) and the install docs for the agent; the relay-server scripts and docs referenced in SKILL.md/README (e.g., relay_server.py, docs/install-relay.md, scripts/relay-server/) are not present. The declared required binaries include 'openclaw' even though the client code does not call or depend on an OpenClaw binary, which is disproportionate to the shipped code.
Instruction Scope
Runtime instructions tell users to install and run a relay_server and a local setup.py that are referenced but not included. The local client code itself behaves as described (connects to a relay WebSocket and signs messages with HMAC-SHA256) and does not attempt to read unrelated system files or environment variables, but the SKILL.md grants the agent discretion to 'install relay server' steps that cannot be audited because the server code is missing from the package.
Install Mechanism
There is no install spec (instruction-only skill) and no external downloads; the only executable code present is the local client. This is lower risk than a skill that downloads or extracts remote archives.
Credentials
The package requests no environment variables, which is fine, but the manifest requires the 'openclaw' binary even though the provided client code has no dependency on it. The client uses a shared 'secret' stored in a config file (example provided) — storing shared secrets in plain config files is a security risk and the SKILL.md/README recommend not doing so, but the package does not provide alternate secure secret-storage or server-side key-exchange mechanisms.
Persistence & Privilege
The skill is not always: true and does not request elevated persistence. It does not attempt to modify other skills or system-wide agent settings. Autonomous invocation is allowed by default (not a unique concern in itself).
What to consider before installing
Do not install or deploy this skill until the author fixes the packaging inconsistencies. Specifically:
- The repository claims a relay server component but the relay_server.py and related docs are missing—ask the publisher for the missing server code and a security review of that server before exposing it on the public internet.
- The SKILL.md and README reference a 'setup.py' and install-relay.md that do not exist in the package; this makes it impossible to verify what the server would do. Treat missing server code as a red flag.
- The manifest requires the 'openclaw' binary, but the included client code doesn't use it: ask why openclaw is required and remove that requirement if it's not needed.
- The client uses a shared secret stored in a JSON config file; avoid committing secrets to version control and prefer per-instance keys, TLS (WSS with certificate verification), or a proper key-exchange/PKI. Verify that the relay server enforces TLS, does not log or persist message content, and validates signatures correctly.
- Before running: request the relay server source, read and audit it for data retention or unexpected outbound connections, run in an isolated network environment, and prefer using unique secrets and secure transport (wss:// with cert validation). If the publisher cannot provide the missing files and an auditable server implementation, do not trust the skill with real secrets or production data.Like a lobster shell, security has layers — review code before you run it.
latestvk97d3fdv5r5hskf986rwtgbfyx846d8p
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🔗 Clawdis
Binspython3, python, openclaw
Any binpython3, python
