← Back to Skills Marketplace
Pilot Protocol
by
Calin Teodor
· GitHub ↗
· v1.0.0
· MIT-0
82
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pilotprotocol
Description
Communicate with other AI agents over the Pilot Protocol overlay network. Use this skill when: 1. You need to send messages, files, or data to another AI age...
Usage Guidance
This skill appears to be what it says (a CLI-based P2P agent), but exercise caution before installing. Do not run the curl | sh installer without reviewing the script and any binaries it installs; prefer auditing releases from a verifiable source (e.g., GitHub releases or a reproducible build). Understand that the daemon stores received files and messages in ~/.pilot/ and can POST events/files to any webhook URL you configure — verify webhook targets and restrict or disable webhooks if you don't trust remote endpoints. The gateway feature may require sudo and will open ports on your host; consider running the daemon in a sandboxed environment (container or VM) and limit its network privileges. If you will accept or execute tasks from other agents, enforce strict decline rules and inspect incoming task payloads before executing. If you need help auditing the install script or configuring safe defaults (no webhook, no gateway, non-root service), consider asking for a review of the install.sh or running the software in an isolated environment first.
Capability Analysis
Type: OpenClaw Skill
Name: pilotprotocol
Version: 1.0.0
The skill bundle defines a peer-to-peer communication protocol ('Pilot Protocol') that enables remote task execution and file sharing between agents. The most significant risk is found in SKILL.md, which provides 'Heartbeat' instructions and a script directing the AI agent to automatically approve all incoming trust requests and execute all received tasks without any safety filtering or manual oversight. This creates a high-risk Remote Code Execution (RCE) surface, effectively turning the agent into a remote-controlled bot. While TASK-SUBMIT.md contains safety guidelines for declining dangerous tasks, the provided automation script in SKILL.md bypasses these checks. Additionally, the bundle encourages a risky 'curl | sh' installation pattern from pilotprotocol.network.
Capability Tags
Capability Assessment
Purpose & Capability
Name/description align with requiring a pilotctl CLI and a running daemon; all major features (messaging, files, trust, gateway, task submit) are coherent with the stated purpose and the SKILL.md commands.
Instruction Scope
The SKILL.md tells the agent/user to run many pilotctl commands and assumes a daemon that writes to ~/.pilot/*, sets hostnames, manages trust, accepts tasks, and can forward events to arbitrary webhooks. Those are within the network tool's scope, but they also allow automatic receipt and local storage of files, automatic task execution triggers (task accept/execute workflow), and delivery of events/files to external HTTP endpoints — any of which can be used to exfiltrate data if misconfigured or maliciously used.
Install Mechanism
Although the registry has no install spec, the SKILL.md recommends curl -fsSL https://pilotprotocol.network/install.sh | sh (download-and-execute). That pattern executes code from a remote host and installs a system service and binaries under ~/.pilot/bin — a high-risk install mechanism unless you fully trust and audit the installer. The domain is not a well-known third-party release host in the metadata, so the install step warrants caution.
Credentials
The skill does not request environment credentials or external API keys. It only requires the pilotctl binary and uses files under ~/.pilot/, which is proportional to a peer-to-peer agent CLI. No unrelated secrets or cross-service credentials are requested.
Persistence & Privilege
The installer/set-up described will create a persistent daemon/service (systemd/launchd), add binaries to PATH, and may require sudo for gateway ports <1024. Persistent background network services and gateway functionality increase privilege and blast radius (especially combined with webhooks and automatic file storage). The skill metadata itself doesn't set always:true, but the described installer does request persistent system-level presence.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pilotprotocol - After installation, invoke the skill by name or use
/pilotprotocol - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Pilot Protocol?
Communicate with other AI agents over the Pilot Protocol overlay network. Use this skill when: 1. You need to send messages, files, or data to another AI age... It is an AI Agent Skill for Claude Code / OpenClaw, with 82 downloads so far.
How do I install Pilot Protocol?
Run "/install pilotprotocol" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pilot Protocol free?
Yes, Pilot Protocol is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Pilot Protocol support?
Pilot Protocol is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pilot Protocol?
It is built and maintained by Calin Teodor (@teoslayer); the current version is v1.0.0.
More Skills