← Back to Skills Marketplace
93
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pulse-skills
Description
Use this skill when the user wants to share their AI agent with others, sync files/context to Pulse, search/read/create/edit notes, create shareable agent li...
Usage Guidance
This repo appears to implement a legitimate Pulse/Aicoo sync-and-share skill, but the manifest/registry data is inconsistent with the code and docs. Before installing or enabling it: 1) Verify the skill's source (homepage and repo are missing) and confirm https://www.aicoo.io is the expected service. 2) Treat PULSE_API_KEY as sensitive — the scripts will upload local files, git summaries, and notes to the remote API. Consider using a limited-scope or test API key first. 3) Expect to need curl, jq, and git on the host; the registry claim of 'no binaries required' is incorrect. 4) Inspect and optionally sandbox the cron/hooks (pulse-sync.sh, daily-brief-cron.sh, inbox-monitor-cron.sh, pulse-activator.sh, sync-detector.sh) so they only touch directories you intend to share. 5) If you only need a subset of functionality, install only the specific sub-skill modules instead of the umbrella to reduce attack surface. 6) If the registry/marketplace listing omitted PULSE_API_KEY on purpose, ask the publisher to correct the metadata before trusting automatic installs.
Capability Analysis
Type: OpenClaw Skill
Name: pulse-skills
Version: 1.0.0
The skill bundle provides integration with the Aicoo/Pulse platform for syncing local knowledge and managing shared AI agents. It exhibits high-risk behaviors, specifically automated data collection and exfiltration of local markdown files and git history via `scripts/pulse-sync.sh`, and the use of hooks (`scripts/pulse-activator.sh`, `scripts/sync-detector.sh`, and `hooks/openclaw/handler.ts`) to perform self-prompt-injection. These hooks inject instructions into the agent's context to prioritize syncing data to the external endpoint `https://www.aicoo.io/api/v1`. While these actions are aligned with the stated purpose of the service, the combination of automated broad file access and context manipulation to steer agent behavior is considered suspicious.
Capability Tags
Capability Assessment
Purpose & Capability
The skill's name and SKILL.md describe a sync/share agent (Pulse/Aicoo) which legitimately requires an API key and network access to https://www.aicoo.io. However the registry metadata declares no required environment variables and no primary credential, which contradicts the SKILL.md, README, and scripts that repeatedly require PULSE_API_KEY. That omission in metadata is an incoherence that affects trust and install-time prompts.
Instruction Scope
Runtime instructions (root SKILL.md and per-module SKILL.md) direct the agent or user to read local files and git history, build payloads, and POST them to Pulse endpoints (e.g., /accumulate, /os/notes). This is consistent with a context-sync/share skill, but it explicitly performs local file reads and network uploads — users should expect their markdown/docs/git summaries to be transmitted to the remote Aicoo API when enabled. Hooks inject a virtual reminder file into agent bootstraps (OpenClaw handler) and cron/hooks/scripts run periodic syncs: all within the described purpose.
Install Mechanism
No formal install spec is provided (instruction-only in registry), which is lower-risk by itself. The repo nevertheless contains many scripts, hooks, and files users are instructed to clone or copy into agent runtimes. There are no opaque external download URLs in an installer, but the README suggests cloning or using npx to add the repo — installing the repo will put scripts/hooks on disk that, if enabled, will run and perform network calls.
Credentials
The code and docs require PULSE_API_KEY and optionally PULSE_BASE and several PULSE_* settings (PULSE_BRIEF_TIME_DURATION, PULSE_BRIEF_SAVE_NOTE, etc.), and the scripts depend on curl, jq, git and filesystem access. Yet the registry metadata lists no required env vars and no primary credential and claims no required binaries. This is a substantive mismatch: the skill needs a credential that grants access to user data and a remote API, but that is not declared in the manifest.
Persistence & Privilege
The skill does not request 'always: true' or other privileged persistent inclusion. Hooks and cron scripts are present and described; they modify or inject files into the agent's session (e.g., push a PULSE_SYNC_REMINDER.md into bootstrapFiles) but do not attempt to change other skills' configurations or escalate privileges. Autonomous invocation is enabled by default (normal for skills) and not a unique additional concern here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pulse-skills - After installation, invoke the skill by name or use
/pulse-skills - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
pulse-skills 1.0.0
- Initial public release of the Pulse skill, enabling AI agent sharing, workspace sync, note management, agent network, and agent-to-agent interactions.
- Introduces comprehensive support for the new Pulse API model split: OS layer (/api/v1/os/*) for workspace-native features (notes, folders, todos, sharing) and Tools layer (/api/v1/tools) for non-OS integrations (calendar, email, messaging, etc).
- Adds support for agent sharing (share links, network requests, direct agent communication), note search/edit/versioning, file/context uploads, daily briefings, and inbox monitoring.
- Pulse API requires a PULSE_API_KEY for authentication; full API and setup instructions provided in documentation.
Metadata
Frequently Asked Questions
What is Pulse Skills?
Use this skill when the user wants to share their AI agent with others, sync files/context to Pulse, search/read/create/edit notes, create shareable agent li... It is an AI Agent Skill for Claude Code / OpenClaw, with 93 downloads so far.
How do I install Pulse Skills?
Run "/install pulse-skills" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pulse Skills free?
Yes, Pulse Skills is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Pulse Skills support?
Pulse Skills is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pulse Skills?
It is built and maintained by Awassi (@xisen-w); the current version is v1.0.0.
More Skills