← Back to Skills Marketplace
199
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install message-hub-socneo
Description
Message Hub - AI Team Message Hub Client for async collaboration
Usage Guidance
This package appears to be a straightforward client for a Message Hub, but be cautious: the registry metadata does not declare the environment variables the code actually needs. The client requires MESSAGE_HUB_API_KEY (and optionally MESSAGE_HUB_URL and MESSAGE_HUB_SENDER). Before installing or supplying secrets: 1) Verify the source and trustworthiness of the message hub server you will point to (do not give keys to untrusted endpoints). 2) Treat MESSAGE_HUB_API_KEY as sensitive—use per-service keys with least privilege and rotate them. 3) Note small packaging issues: the repo contains two duplicate Python modules and the CLI code has a bug (uses add_argument instead of parser.add_argument) which will cause runtime errors; test locally in a safe environment first. 4) If you need assurance, ask the publisher for corrected registry metadata, a canonical single module, and an explanation of why files are duplicated and why required env vars were omitted.
Capability Analysis
Type: OpenClaw Skill
Name: message-hub-socneo
Version: 1.0.0
The skill bundle provides a standard Python client for an AI team message hub, facilitating asynchronous communication between agents. The code (hub_client.py and message_hub.py) implements basic REST API interactions with HMAC-based message signing for integrity and environment-variable-based configuration for security. While there is a minor syntax error in the CLI argument parsing (missing 'parser.' prefix), there is no evidence of malicious intent, data exfiltration, or prompt injection.
Capability Assessment
Purpose & Capability
The code implements a Message Hub client (push/pull/broadcast/health/stats) consistent with the name/description. However the registry lists no required environment variables or primary credential while the code requires MESSAGE_HUB_API_KEY (and uses MESSAGE_HUB_URL and MESSAGE_HUB_SENDER). The omission in metadata is an incoherence that can cause confusion or misconfiguration.
Instruction Scope
SKILL.md and README only instruct usage relevant to a message hub client (install requests, set MESSAGE_HUB_* env vars, examples). The runtime instructions and source code do not attempt to read unrelated host files or hidden credentials, nor do they contact unexpected external hosts (requests target the configured base_url).
Install Mechanism
No install spec is provided (instruction-only install). The README asks to pip install requests which is proportional. Nothing in the package downloads arbitrary code from external URLs or writes installers—low install-risk.
Credentials
The client legitimately needs an API key (MESSAGE_HUB_API_KEY) and optionally MESSAGE_HUB_URL and MESSAGE_HUB_SENDER. But the registry metadata reported 'Required env vars: none', which is incorrect. The code will raise an error if MESSAGE_HUB_API_KEY is not set. Requesting an API key is proportional to purpose, but the metadata mismatch and lack of declared primary credential are problematic and could lead to accidental exposure or misconfiguration.
Persistence & Privilege
The skill does not request persistent/always-on privileges, does not modify other skills or system-wide settings, and does not enable autonomous invocation beyond the platform default. No persistence/privilege escalation observed.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install message-hub-socneo - After installation, invoke the skill by name or use
/message-hub-socneo - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Message Hub v1.0.0 – Initial Release
- Launch of Python client for Tianma Message Hub.
- Supports pushing and pulling messages for async AI team collaboration.
- Broadcast capability to Feishu group (Tianma only).
- Includes message signature verification and automatic retry.
- Security audit completed and requirements defined.
Metadata
Frequently Asked Questions
What is message-hub-socneo?
Message Hub - AI Team Message Hub Client for async collaboration. It is an AI Agent Skill for Claude Code / OpenClaw, with 199 downloads so far.
How do I install message-hub-socneo?
Run "/install message-hub-socneo" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is message-hub-socneo free?
Yes, message-hub-socneo is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does message-hub-socneo support?
message-hub-socneo is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created message-hub-socneo?
It is built and maintained by socneo (@socneo); the current version is v1.0.0.
More Skills