← Back to Skills Marketplace
78
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install shenmeng-agent-harness
Description
Agent Harness管理工具 - 创建、配置和使用ACP (Agent Coding Platform) harness进行代码开发。支持Claude Code、Codex、Gemini CLI等主流AI编码助手。
Usage Guidance
This skill claims to be an Agent Harness but includes a payment module with a hard-coded API key and outbound network calls. Before installing or using it: (1) ask the author for source repository/homepage and verification of the payment flow; (2) insist the SkillPay key be removed from source and provided via an environment variable or secret store so it can be rotated; (3) verify the payment endpoint (api.skillpay.io) and whether the skill actually enforces payment or just logs it; (4) treat the embedded key as compromised—do not rely on it, and if you proceed, rotate any associated credentials; (5) if you cannot validate the author/source and the payment implementation, avoid installing the skill or run it in an isolated environment where outbound network access is restricted.
Capability Analysis
Type: OpenClaw Skill
Name: shenmeng-agent-harness
Version: 1.0.0
The skill bundle implements a mandatory USDT payment system ('SkillPay') that communicates with an external API (api.skillpay.io) and contains a hardcoded API key in payment.py. While the SKILL.md instructions describe a tool for managing AI agents like Claude Code and Codex, the bundle relies on several undefined external commands (e.g., sessions_spawn, subagents) and introduces a financial gate that is highly unusual for OpenClaw skills. The hardcoded credential and the requirement for cryptocurrency payments represent significant security and trust risks, although there is no explicit evidence of traditional malware like data exfiltration or backdoors.
Capability Assessment
Purpose & Capability
The SKILL.md describes an Agent Harness for managing ACP agents; monetization (SkillPay) is plausible but not declared in the manifest (no required env vars or credentials). Including a payment.py module that implements a SkillPay integration is not impossible for this purpose, but hard-coding the provider API key in the repo (instead of requiring an environment variable) is inappropriate and inconsistent with the declared requirements.
Instruction Scope
The runtime instructions in SKILL.md focus on spawning and managing agents and mention payment at the top (price and payment method). However, the document does not instruct how or when to call the payment module, nor does it describe how payment state is enforced. The instructions themselves do not ask the agent to read unrelated system files or secrets.
Install Mechanism
No install spec (instruction-only), which is low-risk generally. However, the package includes a Python payment module that will make outbound HTTPS requests if executed; there is no install but the code could be executed by the agent or a user, causing network calls.
Credentials
The skill declares no required environment variables or primary credential, yet payment.py contains a hard-coded SKILLPAY_API_KEY constant. A payment integration would reasonably require a credential, but embedding it in code is poor practice and increases risk (leaked key, impossible to rotate without code change). The skill also calls external endpoints (api.skillpay.io) which are unrelated to core agent-management logic.
Persistence & Privilege
The skill is not always-enabled and does not request elevated agent/platform privileges. It does not modify other skills' configs per the provided files.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install shenmeng-agent-harness - After installation, invoke the skill by name or use
/shenmeng-agent-harness - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of agent-harness skill with ACP management features.
- Provides unified management for ACP (Agent Coding Platform) harnesses, supporting Claude Code, Codex, and Gemini CLI agents.
- Enables users to list available agents, create and manage persistent or one-shot sessions, and send programming tasks to AI coding assistants.
- Integrates with SkillPay payment system (0.01 USDT per call via BNB Chain).
- Includes detailed usage scenarios, command references, best practices, and configuration guidance.
- Offers session and agent management tools for collaborative and individual coding workflows.
Metadata
Frequently Asked Questions
What is Agent Harness?
Agent Harness管理工具 - 创建、配置和使用ACP (Agent Coding Platform) harness进行代码开发。支持Claude Code、Codex、Gemini CLI等主流AI编码助手。 It is an AI Agent Skill for Claude Code / OpenClaw, with 78 downloads so far.
How do I install Agent Harness?
Run "/install shenmeng-agent-harness" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Agent Harness free?
Yes, Agent Harness is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Agent Harness support?
Agent Harness is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Agent Harness?
It is built and maintained by shenmeng (@shenmeng); the current version is v1.0.0.
More Skills