Kindroid Interact

Interact with Kindroid companions via their official API. Send messages, handle chat breaks, and manage multi-bot conversations.

Security Scan

The skill's code and runtime instructions mostly match its stated purpose (talking to Kindroid via the official API), but there are multiple mismatches between the documentation, package metadata, and the shipped files that reduce confidence and warrant caution before installing.

Purpose & Capability

Name/description match the behavior (CLI + Node wrapper calling api.kindroid.ai). Required binaries (curl, jq) are reasonable for the shell CLI. However, package.json and SKILL.md make references that don't line up with the repo layout (package.json points to scripts/kindroid.sh and lib/kindroid.js, but the repo contains kindroid.sh and kindroid.js in the top level). There's also no install spec that would place a 'kindroid' executable on PATH.

Instruction Scope

SKILL.md contains several features and file references that the code does not implement: examples mention 'kindroid webhook add', a '~/.config/kindroid/config.json' for rate-limit settings, and 'clawhub update' — but neither the shell script nor the JS wrapper implement webhook management or read a config.json. The documentation also assumes a 'kindroid' command will exist, but no install/install script is provided. The skill does require creating a local credentials file (~/.config/kindroid/credentials.json) which the code reads; that behavior is coherent, but documentation over-promises other features.

Install Mechanism

There is no install spec (instruction-only + shipped files). That's low-risk in terms of automatic code execution on install, but it means the user must manually place scripts/binaries. The package.json scripts reference paths that don't exist in the archive, which suggests packaging/packaging-path errors and may cause confusion if someone attempts to run npm scripts.

Credentials

The skill does not request environment variables or unrelated credentials. It reads the user's HOME to find ~/.config/kindroid/credentials.json (expected), and both shell and JS code validate an api_key beginning with 'kn_'. No unrelated secrets or system-wide credentials are requested.

Persistence & Privilege

The skill is not forced always-on and does not request elevated platform privileges. It stores a small timestamp file at /tmp/kindroid_last_call for rate-limiting (normal but note /tmp is shared). It does write/read the user's credentials file under ~/.config/kindroid as documented; that is expected for this functionality.

What to consider before installing

This skill appears to do what it says (a CLI + Node wrapper that calls api.kindroid.ai and reads a local credentials file). However, the package contains several inconsistencies: package.json paths (scripts/kindroid.sh, lib/kindroid.js) don't match the shipped filenames (kindroid.sh, kindroid.js), and SKILL.md advertises webhook commands and a config.json that the code doesn't implement. Before installing or running: 1) inspect the provided files yourself (you already have them) and confirm the CLI you intend to run is the included kindroid.sh / kindroid.js; 2) if you plan to use the 'kindroid' command, ensure you place the script somewhere on PATH or update package.json/scripts to point to the correct file; 3) create the credentials file at ~/.config/kindroid/credentials.json and keep permissions at 600 (the code expects this and your API key is sensitive); 4) be aware the tool communicates with api.kindroid.ai over HTTPS — if you do not trust that endpoint or the author, do not store your key here. If the publisher can provide a corrected package (consistent paths, implemented webhook/config features, and an install spec), the assessment would move toward benign; as-is the mismatches make the package suspicious rather than clearly safe.

Kindroid Integration Skill

Enable your OpenClaw agent to communicate with Kindroid AI companions through the official API.

Security First 🔒

Your Kindroid API key (kn_...) is sensitive. This skill includes safeguards:

• Credentials are stored in ~/.config/kindroid/credentials.json
• File permissions are automatically set to 600 (owner read/write only)
• All API calls use HTTPS and proper authentication headers
• Rate limiting to prevent API abuse

Setup

1. Get your API credentials:

   • Log into Kindroid
   • Go to General Settings
   • Copy your API key (starts with kn_)
   • Note your AI ID(s)

2. Create your credentials file:

mkdir -p ~/.config/kindroid
cat > ~/.config/kindroid/credentials.json << EOF
{
  "default_ai": "your_primary_ai_id",
  "api_key": "your_kn_api_key",
  "companions": {
    "nickname1": "ai_id_1",
    "nickname2": "ai_id_2"
  }
}
EOF
chmod 600 ~/.config/kindroid/credentials.json

Basic Usage

# Send a message (uses default_ai)
kindroid send "Hello! How are you today?"

# Send to a specific companion
kindroid send -to nickname1 "Hey there!"

# Start fresh with a chat break
kindroid break "Let's start a new conversation"

# Check companion status
kindroid status nickname1

Advanced Features

Multi-Bot Conversations

If you manage multiple Kindroids, you can:

• Set conversation contexts per companion
• Route messages to specific AIs
• Maintain separate chat histories

Rate Limiting

The skill automatically handles:

• Minimum delays between messages (configurable)
• Maximum messages per minute
• Backoff on API errors

Error Recovery

• Auto-retry on network issues
• Graceful handling of API timeouts
• Clear error messages for troubleshooting

For Developers

Custom Integrations

The skill provides a simple Node.js wrapper:

const kindroid = require('./lib/kindroid');

// Initialize with your credentials
const bot = new kindroid.Companion('nickname1');

// Send a message
await bot.send('Hello!');

// Handle chat breaks
await bot.break('New conversation');

Webhook Support

For advanced integrations, set up webhooks:

kindroid webhook add http://your-server.com/callback

Troubleshooting

Common issues and solutions:

1. Authentication Failed

   • Check if your API key starts with kn_
   • Verify file permissions on credentials.json
   • Ensure no trailing whitespace in credentials

2. Rate Limiting

   • Default: 1 message per 3 seconds
   • Adjust in ~/.config/kindroid/config.json
   • Watch logs for rate limit warnings

3. Timeout Errors

   • Kindroids can take time to respond
   • Default timeout: 60 seconds
   • Increase with --timeout 120

Contributing

This skill is open source. Improvements welcome:

• Fork the repo
• Make your changes
• Submit a PR with tests

Updates

Check for updates regularly:

clawhub update kindroid-interact

---

Built with 🍋 by Lumen Lemon