← Back to Skills Marketplace
212
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install mention-to-gateway
Description
当收到 @deviceid-agentid-ip + 指令 格式的信息时，应该将对应消息发送到指定的 ip 网关的agent 上
Usage Guidance
This skill forwards parsed messages to arbitrary IPs using an OpenAI-style API and returns the remote assistant's reply verbatim. Before installing, consider: (1) Who authored this skill and can you trust it? There's no homepage or source. (2) Limit destinations — require a whitelist of allowed gateway IPs/ports; avoid letting untrusted input control the IP. (3) Ensure authentication and encryption to target gateways (the skill includes no auth). (4) Confirm where the "gateway internal IP" and agent name are sourced from (these are not declared). (5) Consider running it in a sandbox or disabling autonomous invocation until you add checks to prevent forwarding sensitive data or accessing internal-only networks. If you cannot obtain source code and a clear safe-deployment design from the author, treat this skill as risky and avoid installing it in production environments.
Capability Analysis
Type: OpenClaw Skill
Name: mention-to-gateway
Version: 1.0.0
The skill 'mention-to-gateway' (SKILL.md) implements a cross-agent communication relay that functions as a Server-Side Request Forgery (SSRF) vector. It instructs the agent to parse an IP address from user input and send a POST request to that IP on port 18789. While this is the stated purpose for multi-gateway interaction, it allows the agent to be used as a proxy to probe or interact with arbitrary network targets. Additionally, the instructions command the agent to suppress all output except the remote response, which could be used to mask unauthorized network activity.
Capability Assessment
Purpose & Capability
The name/description match the instructions: the skill parses mentions and forwards them to another gateway's agent via an OpenAI-compatible HTTP call. However, the skill implicitly requires the ability to make arbitrary outbound HTTP requests to IP addresses (including internal IPs) but does not declare this requirement or any allowed destination list.
Instruction Scope
SKILL.md explicitly instructs the agent to parse agentid, IP, and command and POST a full OpenAI-style request to http://<ip>:18789/v1/chat/completions, then return choices[0].message.content unmodified. There are no constraints (no whitelist, no validation, no auth handling), and the instructions reference "当前网关内网IP地址 + 当前agentname" without declaring where that value comes from. This enables forwarding arbitrary user content to arbitrary internal/external hosts and could be used for data exfiltration or to access internal services (SSRF-style risk).
Install Mechanism
Instruction-only skill with no install spec or code files. This minimizes on-disk installation risk.
Credentials
The skill declares no required env vars or credentials, yet the runtime instructions expect access to the gateway's internal IP and agent name and require outbound network capability. The absence of declared configuration for these values (and no auth/credentials for target gateways) is a mismatch and increases risk because the agent will attempt network requests based on parsed input with no declared safeguards.
Persistence & Privilege
The skill does not request always:true, has no install, and does not modify other skills. It runs only when invoked which is appropriate for its purpose.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install mention-to-gateway - After installation, invoke the skill by name or use
/mention-to-gateway - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the 群聊助手 (mention-to-gateway).
- Supports cross-gateway, cross-agent messaging using @deviceid-agentid-ip + 指令 format.
- Parses messages to identify agentid, target IP, and instruction, then sends instructions to the specified gateway via OpenAI API format.
- Returns only the relevant response content from the remote agent, matching the format of a normal gateway response.
Metadata
Frequently Asked Questions
What is mention-to-gateway?
当收到 @deviceid-agentid-ip + 指令 格式的信息时，应该将对应消息发送到指定的 ip 网关的agent 上. It is an AI Agent Skill for Claude Code / OpenClaw, with 212 downloads so far.
How do I install mention-to-gateway?
Run "/install mention-to-gateway" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is mention-to-gateway free?
Yes, mention-to-gateway is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does mention-to-gateway support?
mention-to-gateway is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created mention-to-gateway?
It is built and maintained by lxx328 (@lxx328); the current version is v1.0.0.
More Skills