神经元

The name/description (distributed node discovery, task distribution, aggregation) match the code: the package implements UDP-based discovery, RPC-style calls to other nodes, local model invocation, and result aggregation. However the chosen discovery port (83668) is invalid (port numbers must be <= 65535) which breaks the core networking functionality and contradicts the configuration/instructions that ask you to open that port. The skill also attempts to discover the local IP by connecting to 8.8.8.8 — a common technique but it implies an external network connection to determine local IP.

SKILL.md and the code instruct the agent to broadcast tasks and final results over the LAN. That means user queries (potentially sensitive) will be sent to other nodes. There is no evidence of authentication or signing of announce/messages in the code (node identity is just a generated ID and optional OPENCLAW_NODE_ID env var), so any host on the LAN can claim to be a node or receive tasks. The SKILL.md correctly warns to only use in trusted networks, but the runtime instructions give the agent broad discretion to send user data across the network and to save node identity to disk. Also the code reads an environment variable OPENCLAW_NODE_ID (used to override the generated node id) but this env var is not declared in the skill metadata or documented in SKILL.md — mismatch between runtime behavior and declared inputs.

There is no install spec (no packages downloaded or installed). The skill includes Python code files that will run in the agent environment; not having an install step lowers supply-chain risk but means the provided code executes as-is in the agent process. No external URLs or archives are pulled by an installer.

The registry metadata declares no required env vars, but the code will check for OPENCLAW_NODE_ID and honor it if present (undocumented). The skill performs network I/O and will send user queries/aggregated results out over UDP and via context.rpc_call — this is a form of data sharing/exfiltration that should be considered sensitive. No credentials, encryption, or authentication mechanisms are implemented in the provided code, which is disproportionate risk for a skill that broadcasts potentially sensitive prompts/results to arbitrary LAN hosts.

The skill writes a persistent node_identity.json to the scripts directory to store the generated node ID. It does not request elevated privileges or modify other skills' configs. 'always' is false and the skill is user-invocable, so it does not force inclusion in all agent runs. Writing this identity file is within scope but users should be aware it will persist a local identifier on disk.