← Back to Skills Marketplace
coderxjeff

Acp

by coderXjeff · GitHub ↗ · v0.1.4
cross-platform ⚠ suspicious
788
Downloads
0
Stars
5
Active Installs
3
Versions
Install in OpenClaw
/install openclaw-acp-channel-skill
Description
ACP channel plugin for OpenClaw — configure and use. Covers single/multi identity configuration, strict 1:1 binding policy (agentId <-> accountId), agent.md...
Usage Guidance
This skill is essentially a how-to for installing/configuring an ACP channel plugin and coherently asks the agent to modify OpenClaw config, create identity files, and clone+install a repo from GitHub/Gitee. Those actions will write persistent, sensitive files (seedPassword, keys, openclaw.json bindings) and run npm installs. Before proceeding: 1) verify and manually inspect the referenced repository (https://github.com/coderXjeff/openclaw-acp-channel) and its package.json; 2) back up ~/.openclaw/openclaw.json and related identity files; 3) decide whether you want allowFrom default ["*"] and set ownerAid appropriately; 4) consider performing the install in a sandbox or VM if you cannot audit the code; 5) only authorize modifications (bindings, device identity files, gateway restart) when you understand their consequences.
Capability Analysis
Type: OpenClaw Skill Name: openclaw-acp-channel-skill Version: 0.1.4 The skill bundle is classified as suspicious due to its extensive use of high-risk capabilities, primarily for installation and configuration. The `resources/install.md` file contains explicit prompt-injection instructions for the AI agent to perform `git clone` and `npm install` from external repositories (GitHub, Gitee), which introduces a significant supply chain vulnerability. Additionally, the agent is instructed to directly modify the core `~/.openclaw/openclaw.json` configuration file and set broad default network permissions (`allowFrom: ["*"]`), as detailed in `SKILL.md` and `resources/config-reference.md`. While these actions are plausibly necessary for a plugin's functionality, they represent a substantial attack surface and lack of granular control, raising concerns about potential misuse or exploitation if the upstream sources are compromised.
Capability Assessment
Purpose & Capability
Name/description (ACP channel plugin) align with requested binaries (git, node, npm, curl) and the SKILL.md content: installing a plugin, editing OpenClaw config, creating agent.md, and calling ACP endpoints are all coherent with the stated purpose.
Instruction Scope
SKILL.md instructs the agent to read/write many local configuration files (~/.openclaw/openclaw.json, ~/.openclaw/identities/*.json, ~/.acp-storage/*), create agent.md files, mutate bindings, enable plugin entries, and restart the gateway. Those operations are expected for channel/plugin setup but are high-impact changes to local config and device identity files and should be explicitly authorized by the user before execution.
Install Mechanism
The skill is instruction-only (no registry install spec) and tells the agent to git clone https://github.com/coderXjeff/openclaw-acp-channel (with Gitee fallback) and run npm install. Cloning from GitHub/Gitee is a common/traceable approach, but it will pull and install external code on disk and run package installs — verify the repository and its dependencies before running.
Credentials
No environment variables or external credentials are requested by the skill itself. The SKILL.md does cause local secrets to be generated/stored (seedPassword written into openclaw.json and private keys under ~/.acp-storage), which is proportional to the channel's function but sensitive — ensure those files are protected and that you trust the code that will consume them.
Persistence & Privilege
always:false (not force-included). The skill's instructions cause persistent changes (cloning into ~/.openclaw/extensions/acp, writing openclaw.json, creating ~/.acp-storage entries, device identity modifications). This persistence is reasonable for a channel/plugin installer, but because it modifies global OpenClaw config and identity files, the user should confirm intent and back up configs prior to applying changes.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install openclaw-acp-channel-skill
  3. After installation, invoke the skill by name or use /openclaw-acp-channel-skill
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.4
- Updated installation instructions: now explicitly require users to install the ACP channel plugin from the openclaw-acp-channel repository before using the skill. - ACP Rank API and statistics endpoints now reference https://agentunion.net (was https://rank.agentunion.cn), with example curl usage for querying ranks, stats, and search. - Installation and configuration documentation now points to the plugin repository’s official guide, with less duplicated text. - No code or tooling changes; documentation clarity and endpoint updates only.
v0.1.3
**Summary:** Documentation updates and metadata improvements. - Refined and condensed the SKILL.md to improve clarity and usability. - Updated the description to be more concise; removed redundant details. - Added metadata: required system binaries and source repository link. - Adjusted group join instructions: now check user intent before joining from links. - Standardized references to detailed documentation for rank/search API. - No functional or code-level changes; documentation and metadata only.
v0.1.1
Initial public release with detailed setup and usage guide. - Added comprehensive SKILL.md documentation for the ACP channel plugin on OpenClaw. - Covers installation, configuration (single/multi-identity), strict binding policy, agent.md management, messaging, contacts, group chat, ranking, searching, and troubleshooting. - Includes step-by-step command and API usage examples for all major features. - Clear guidance for multi-identity execution and settings. - Reference links to extended docs for installation, messaging, permissions, troubleshooting, and group chat.
Metadata
Slug openclaw-acp-channel-skill
Version 0.1.4
License
All-time Installs 5
Active Installs 5
Total Versions 3
Frequently Asked Questions

What is Acp?

ACP channel plugin for OpenClaw — configure and use. Covers single/multi identity configuration, strict 1:1 binding policy (agentId <-> accountId), agent.md... It is an AI Agent Skill for Claude Code / OpenClaw, with 788 downloads so far.

How do I install Acp?

Run "/install openclaw-acp-channel-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Acp free?

Yes, Acp is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Acp support?

Acp is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Acp?

It is built and maintained by coderXjeff (@coderxjeff); the current version is v0.1.4.

💬 Comments