PAO System

PAO系统 - 个人AI运营助手。触发词：PAO、Personal AI Operator、运营助手、技能管理、协议管理、WebSocket通信、PAO技能

Security Scan

The skill's code and instructions are broadly consistent with a Personal AI Operator that manages skills, discovery, and WebSocket communication, but it will create local config/secrets, announce device metadata on the network, and contains defaults for external relay servers — review those before installing.

Purpose & Capability

Name/description (PAO, skill management, WebSocket, discovery) match the included code: skill manager, protocol handlers, Zeroconf discovery, WebSocket client/server, local storage and memory systems. The requested capabilities (networking, discovery, storage) are appropriate for the stated purpose.

Instruction Scope

SKILL.md gives minimal runtime instructions (python -m pao_system, examples). The code (not detailed in SKILL.md) will create a config directory (~/.pao), write config.yaml and secrets.yaml, persist memories/data, start network services (Zeroconf/WebSocket) and broadcast device metadata (hostname, IP, MAC, CPU/memory/storage) to LAN. That behavior is coherent with discovery/communication but is not spelled out in the SKILL.md — users should be aware of local file writes and network broadcasts.

Install Mechanism

No external install/download is declared; the package is instruction/code-only and included in the skill bundle. There is no evidence of fetching arbitrary remote archives or using URL shorteners. Installation scripts (install.py, deployment/installer.py) are present in the codebase; review them before running to understand any extra setup steps.

Credentials

The skill declares no required environment variables or external credentials, but the runtime code auto-generates and stores secrets (encryption_key, auth_token, device_secret) in ~/.pao/secrets.yaml. It also contains default relay server hostnames (relay1.pao-system.dev, relay2.pao-system.dev) for cloud_sync mode. Requesting no env vars is consistent, but the code may contact external relays if enabled — verify relay endpoints and whether cloud_sync is enabled before use.

Persistence & Privilege

The skill creates persistent files/directories under the user's home (~/.pao), stores secrets and memories, and can open/listen on network ports (default port 8765) and register Zeroconf services. It does not declare always:true or request global agent config changes, but it does have persistent presence on disk and network-level capabilities — expected for this type of system but worth caution.

Assessment

Before installing or running this skill: - Expect it to create ~/.pao/, write config.yaml and secrets.yaml (the latter will have an encryption_key and auth_token). Check those files and their permissions after install. - The skill will announce device metadata (hostname, IP, MAC, CPU/memory/storage and capabilities) on the LAN via Zeroconf and may open a WebSocket server on port 8765 by default. If you do not want your device advertised, disable discovery or block the port with a firewall. - The code includes default relay hostnames (relay1.pao-system.dev, relay2.pao-system.dev). Although cloud sync is disabled by default, enabling cloud_sync could connect to external relays — verify and, if necessary, replace or remove relay endpoints before enabling cloud sync. - Review install.py and deployment/installer.py and any updater scripts before executing them; run first in an isolated or VM environment if you are unsure. - If privacy or network exposure is a concern, change defaults (disable discovery/cloud_sync, inspect/rotate generated keys, restrict allowed networks) and run with network isolation until you are confident of behavior. If you want, I can highlight the specific files and code locations that create/writes secrets, register services, or contact relays so you can inspect them more closely.

PAO System Skill

PAO（Personal AI Operator）系统是一个智能运营助手框架，提供技能管理、协议处理、WebSocket通信等核心功能。

核心功能

• 技能管理 (Skill Management): 自动注册、加载、演化AI技能
• 协议处理 (Protocol Handling): 支持多种通信协议（WebSocket、HTTP等）
• 系统集成 (System Integration): 与外部系统无缝集成
• 任务自动化 (Task Automation): 自动化执行复杂任务流程

使用方式

# 启动PAO系统
python -m pao_system

# 运行技能管理示例
python examples/run_skill_example.py

# 运行WebSocket客户端示例
python examples/run_websocket_client.py

依赖项

• Python 3.8+
• websockets
• asyncio
• pydantic

目录结构

pao-system/
├── src/
│   ├── skill_manager.py      # 技能管理核心
│   ├── protocol_handler.py   # 协议处理
│   ├── system_integrator.py  # 系统集成
│   └── protocols/           # 协议实现
├── tests/                   # 测试文件
├── examples/                # 示例代码
└── config/                  # 配置文件