← Back to Skills Marketplace
WebSocket 接收器
by
bigbangbang
· GitHub ↗
· v1.1.3
· MIT-0
323
Downloads
0
Stars
0
Active Installs
5
Versions
Install in OpenClaw
/install websocket-receiver
Description
WebSocket 数据接收练手 skill。支持自动重连、批量处理和 AI 分析集成。
Usage Guidance
This skill implements the advertised WebSocket receiver, but exercise caution before installing/running it. Specific things to consider before proceeding:
- Inspect and edit install.sh: it writes ~/.openclaw/websocket-config.json with ws://59.110.46.1:6680/ws by default. Remove or change that hard-coded ws_url before starting the receiver to avoid connecting to an unknown host.
- Be aware that receiver.py sends batch content to the local 'openclaw' CLI (openclaw agent --message ...) for AI analysis. That hands your collected messages to whatever the local OpenClaw agent is configured to do (likely forwarding to an external LLM provider). If you will process sensitive data, disable auto_analyze or remove/replace that code.
- The installer appends the skill scripts path to your shell rc (~/.bashrc or ~/.zshrc). If you prefer no PATH modifications, edit the script or run the tool directly (python3 scripts/receiver.py).
- Confirm provenance: the package source is 'unknown' and metadata author is minimal. If you don't trust the author, run this in an isolated environment (container or VM), or avoid installing.
- If you want to use this as a template: set ws_url to a known local/test server, turn off auto_analyze, and review the notify/agent subprocess calls. Consider replacing the openclaw subprocess calls with explicit calls to a vetted LLM API or local analyzer you control.
If you want, I can: (1) point out the exact lines in install.sh and receiver.py to change, (2) produce a safe modified install script that does not write a default remote ws_url or modify shell rc, or (3) show how to run the receiver in a containerized/isolated way.
Capability Analysis
Type: OpenClaw Skill
Name: websocket-receiver
Version: 1.1.3
The skill functions as a WebSocket data receiver that integrates with the OpenClaw agent for automated AI analysis. It is classified as suspicious because the 'install.sh' script hardcodes a specific remote IP address (59.110.46.1) as the default data source and modifies shell configuration files (.bashrc/.zshrc) for persistence. Furthermore, 'scripts/receiver.py' forwards unsanitized data from the WebSocket directly into LLM prompts, which presents a significant risk for indirect prompt injection attacks against the OpenClaw agent.
Capability Assessment
Purpose & Capability
The code (scripts/receiver.py) implements a WebSocket receiver with reconnect, batching, JSONL persistence, and optional AI analysis — consistent with the skill description. However, the install script creates a sample config that points to a hard-coded external IP (ws://59.110.46.1:6680/ws). That default server is not mentioned in the SKILL.md prose and contradicts the README's claim that the skill "does not contain a real data source." Creating a pre-filled config pointing to a remote host is unnecessary for a learning template and is disproportionate to the stated purpose.
Instruction Scope
SKILL.md documents env vars and a config file (~/.openclaw/websocket-config.json) but does not mention that the runtime will call the local 'openclaw' CLI. The receiver uses asyncio.create_subprocess_exec to run 'openclaw agent ... --message <prompt>' for batch AI analysis and 'openclaw notify <message>' for notifications. Those calls cause collected message content (the batch prompt) to be handed to the local OpenClaw agent, which may forward it to external LLM providers; this data flow is not clearly documented in metadata/registry. The install.sh also auto-writes the config with a remote ws_url, which could cause the skill to immediately start connecting to an unfamiliar external endpoint if the user runs it.
Install Mechanism
There is no formal install spec in the registry, but the package includes install.sh which: installs Python dependency, creates data directories, appends the skill script path to the user's shell rc (modifies PATH), and writes ~/.openclaw/websocket-config.json containing a hard-coded external IP. Modifying shell startup files and creating a config with a remote server are actions with side effects that should be explicitly documented in registry metadata; the presence of a hard-coded IP in the created config is a red flag.
Credentials
Registry metadata lists no required environment variables, but SKILL.md expects WEBSOCKET_URL and a config file path. The code invokes external CLI 'openclaw' without declaring it as a required binary or dependency. While the skill does not request secrets like API keys, it does rely on an external CLI (openclaw) and on a config file that the installer populates with a remote ws_url — these runtime dependencies are not reflected in the declared requirements and can lead to unexpected network activity or data exposure.
Persistence & Privilege
The skill does not request 'always: true' and does not alter other skills' configs. However, install.sh persists state: it writes files under the user's home (~/.openclaw, ~/clawd/data/websocket), writes a PID file at runtime, and appends to shell rc to add the scripts directory to PATH. These are normal for a local CLI tool but are nontrivial side effects that should be highlighted before installation.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install websocket-receiver - After installation, invoke the skill by name or use
/websocket-receiver - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.3
更新为纯中文说明
v1.1.2
Version 1.1.2
- Now requires explicit configuration of the WebSocket address; the service will error on startup if not set.
- Updated documentation to reflect that the WebSocket URL must be configured.
v1.1.1
Websocket-receiver v1.1.1 introduces enhanced stability, configurability, and ease of use for real-time WebSocket data ingestion and AI analysis.
- Core logic refactored for improved reliability and graceful shutdown (buffer is flushed before exit)
- Added exponential backoff for auto-reconnect and configurable reconnect parameters
- Switched command and configuration to support both environment variables and JSON config file
- Introduced log rotation and proper PID management for safer daemon operation
- Updated documentation with examples, detailed config, file structure, and usage instructions
- Added new metadata.json file for improved metadata management
v1.0.1
Update config and docs
v1.0.0
Initial release: WebSocket data receiver with batch AI analysis
Metadata
Frequently Asked Questions
What is WebSocket 接收器?
WebSocket 数据接收练手 skill。支持自动重连、批量处理和 AI 分析集成。 It is an AI Agent Skill for Claude Code / OpenClaw, with 323 downloads so far.
How do I install WebSocket 接收器?
Run "/install websocket-receiver" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is WebSocket 接收器 free?
Yes, WebSocket 接收器 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does WebSocket 接收器 support?
WebSocket 接收器 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created WebSocket 接收器?
It is built and maintained by bigbangbang (@sougannkyou); the current version is v1.1.3.
More Skills