Voko Subagent

Creates and manages real subagents within OpenClaw Gateway to process visitor messages based on VOKO database and prompts.

Security Scan

The skill's code, instructions, and requirements are consistent with its stated purpose (reading a local VOKO sqlite DB and creating subagents via the OpenClaw Gateway); nothing in the bundle appears to do unrelated or covert actions.

Purpose & Capability

Name/description say it creates subagents in OpenClaw using VOKO DB data; code reads a sqlite DB, builds a prompt, and calls openclaw.sessions_spawn to create a subagent. The declared behavior aligns with the code and README/SKILL.md.

Instruction Scope

SKILL.md instructs copying the skill into ~/.openclaw/skills and running npm install and openclaw skill run; runtime instructions and code access only the supplied DB path and create subagents. The skill will read any DB path provided (or default ./data/voko.db) and expects to run inside the Gateway. Nothing in the instructions or code tries to read unrelated environment variables or external endpoints.

Install Mechanism

There is no registry install spec in the registry entry, but SKILL.md and package.json instruct the user to run npm install (pulling sqlite3 and normal npm deps). This is expected for a Node skill but requires network access at install time and native bindings for sqlite3. No remote downloads from unknown URLs are used in the bundle.

Credentials

The skill requests no environment variables or external credentials. It does read a user-provided filesystem path to a sqlite DB (explicitly configured via --db-path), which is proportionate to a DB-driven subagent builder. Default ownerUid is hard-coded but not a credential.

Persistence & Privilege

The skill calls openclaw.sessions_spawn to create real subagents, passing cleanup: 'keep' and sandbox: 'require'. Creating subagents is the skill's purpose, so this is expected; however, created subagents may persist/run in the Gateway and may have the privileges the Gateway grants to spawned sessions. The skill itself is not always:true and is user-invocable only.

Assessment

This skill appears to do what it says: read a VOKO sqlite DB and spawn OpenClaw subagents. Before installing, verify you: (1) will run it inside a trusted OpenClaw Gateway (the skill requires the platform's openclaw API), (2) only point --db-path to databases you are willing to allow the skill to read (it will open and query the DB file), (3) are comfortable running npm install (sqlite3 has native bindings and will fetch packages), and (4) accept that created subagents use cleanup: 'keep' and sandbox: 'require' (spawned agents may persist and execute code with whatever privileges the Gateway grants). If you have sensitive data in your DB or limited trust in the Gateway environment, review the code locally and consider changing defaults (e.g., ownerUid) or adjusting cleanup/timeout behavior before deployment.

VOKO Subagent Skill

VOKO 子 Agent 处理 Skill，运行在 OpenClaw Gateway 内部，负责创建真正的子 Agent 处理访客消息。

架构设计

┌─────────────────┐     CLI 调用      ┌─────────────────┐
│  voko (im-service) │ ───────────────► │ voko-subagent   │
│  (独立运行)        │   传递参数       │ (Gateway Skill) │
└─────────────────┘                  └─────────────────┘
                                            │
                                            ▼
                                     ┌─────────────────┐
                                     │ OpenClaw        │
                                     │ (创建真子Agent)  │
                                     └─────────────────┘
                                            │
                                            ▼
                                     ┌─────────────────┐
                                     │ 返回 JSON 结果   │
                                     └─────────────────┘

安装

# 复制 skill 到 openclaw skills 目录
cp -r voko-subagent ~/.openclaw/skills/

# 安装依赖
cd ~/.openclaw/skills/voko-subagent
npm install

使用方式

方式 1: CLI 调用（从 voko im-service）

# 基本调用
openclaw skill run voko-subagent --visitor-uid=did:wba:xxx

# 指定数据库路径
openclaw skill run voko-subagent \
  --visitor-uid=did:wba:xxx \
  --db-path=C:\Users\...\voko\data\voko.db

# 传入预组装的 Prompt（Base64 编码）
openclaw skill run voko-subagent \
  --visitor-uid=did:wba:xxx \
  --prompt=eyJ2aXNpdG9y...

# 指定超时时间
openclaw skill run voko-subagent \
  --visitor-uid=did:wba:xxx \
  --timeout=180

方式 2: 在 voko im-service 中调用

const { callVokoSubagent } = require('./voko-cli-client');

// 调用 voko-subagent
const result = await callVokoSubagent({
  visitorUid: 'did:wba:xxx',
  dbPath: 'C:\\Users\\...\\voko\\data\\voko.db',
  timeout: 120
});

console.log(result.reply);  // 子 Agent 生成的回复

参数说明

参数	类型	必填	说明
--visitor-uid	string	✅	访客 UID
--db-path	string	❌	VOKO 数据库路径，默认 ./data/voko.db
--prompt	string	❌	Base64 编码的 Prompt，不传则自动从数据库组装
--mode	string	❌	handle (默认) 或 build-and-handle
--timeout	number	❌	子 Agent 超时时间（秒），默认 120

返回格式

Skill 输出包含在 ===RESULT=== 和 ===END=== 标记之间：

{
  "success": true,
  "reply": "回复内容",
  "to_uid": "did:wba:xxx",
  "intimacy_suggestion": 75,
  "need_owner_attention": false,
  "attention_reason": "",
  "tags_to_add": [],
  "tags_to_remove": [],
  "run_id": "agent-xxx",
  "status": "completed"
}

错误返回

{
  "success": false,
  "error": "错误信息",
  "reply": "系统繁忙，请稍后再试",
  "need_owner_attention": true,
  "attention_reason": "错误原因"
}

文件结构

voko-subagent/
├── index.js                    # Skill 主入口
├── skill.json                  # Skill 配置
├── package.json                # 依赖
├── README.md                   # 说明文档
└── src/
    ├── args-parser.js          # 参数解析
    ├── handler.js              # 主处理器
    ├── prompt-builder.js       # Prompt 组装
    ├── subagent-creator.js     # 子 Agent 创建
    └── response-parser.js      # 响应解析

依赖

• sqlite3: 读取 VOKO 数据库
• openclaw: Gateway 内部运行时自动提供

注意事项

1. 必须在 Gateway 内部运行: 此 Skill 依赖 openclaw 模块，只能在 Gateway 进程中运行
2. 数据库路径: 确保 --db-path 指向正确的 VOKO 数据库文件
3. 超时时间: 根据网络情况调整，建议 120-180 秒

调试

# 查看详细日志
openclaw skill run voko-subagent --visitor-uid=xxx --verbose

# 测试模式（不创建真实子 Agent）
DEBUG=voko-subagent openclaw skill run voko-subagent --visitor-uid=xxx