← Back to Skills Marketplace
hydralerne

Oblien workspace runtime

by Hydra de lerne · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
267
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install oblien-runtime
Description
Complete Oblien workspace environment — what you are running inside (Firecracker microVM), how auth works (gateway JWT vs raw token), and the full Internal A...
Usage Guidance
This skill is a documentation-style runtime reference for a high-privilege Oblien workspace API. Before installing or enabling it, consider: 1) Source trust — the skill lists no homepage or publisher identity; prefer skills from known/trusted providers. 2) Secrets handling — the SKILL.md uses client_id/client_secret and JWT examples but the registry declares no required env vars; confirm how credentials will be provided and ensure tokens are not leaked. 3) Privileged actions — the API can read/write any file and execute commands; only allow use if you trust the calling agent and have logging/auditing in place. 4) Network exposure — gateway vs direct tokens and public_access settings affect exposure; verify network config. If you want to proceed, ask the publisher for provenance (homepage, repo), clarify which credentials are required, and restrict token scopes and workspace network settings. If you cannot verify the source or secret handling, do not enable autonomous use of this skill.
Capability Analysis
Type: OpenClaw Skill Name: oblien-runtime Version: 1.0.0 The bundle contains comprehensive documentation and API references for the Oblien workspace runtime, an environment based on Firecracker microVMs. It provides instructions for an AI agent to interact with an internal API (port 9990) for file management, command execution, and terminal sessions. While it describes high-privilege capabilities (root access, arbitrary command execution), these are presented as standard features of the development environment, and there is no evidence of malicious intent, data exfiltration, or prompt injection attacks in the provided files (SKILL.md, _meta.json).
Capability Assessment
Purpose & Capability
The name and description match the instructions: the document is a runtime reference for an Oblien workspace internal API (file access, exec, terminal, watcher). The capabilities described align with the stated purpose of describing the workspace runtime.
Instruction Scope
The document explicitly instructs agents about an Internal API that can read/write any filesystem path, execute arbitrary commands, open interactive PTYs, and stream output — powerful operations that go beyond typical lightweight helper skills. The SKILL.md includes example snippets referencing environment variables (e.g., OBLIEN_CLIENT_ID, OBLIEN_CLIENT_SECRET, GATEWAY_JWT) and command examples even though the skill metadata lists no required env vars; the instructions therefore reference secrets/variables not declared in the registry metadata.
Install Mechanism
Instruction-only skill with no install spec and no code files. This lowers the disk/write risk because nothing is downloaded or executed by an installer, but the runtime instructions still describe powerful remote APIs the agent may call.
Credentials
The SKILL.md shows and encourages use of sensitive credentials and tokens (client ID/secret, gateway JWT, raw tokens) but the registry entry declares no required environment variables or primary credential. That mismatch reduces clarity about what secrets the skill actually needs and how they should be provided. The documented Internal API also permits reading arbitrary files (which may include system or user secrets) — a high privilege surface that should be justified and protected.
Persistence & Privilege
The skill is not forced always:true and is user-invocable, which is appropriate. However, because the runtime describes an API that grants broad filesystem and command execution capability, autonomous invocation (the default) increases the risk if the skill is allowed to run without additional safeguards. There is no indication the skill modifies other skills or agent configs.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install oblien-runtime
  3. After installation, invoke the skill by name or use /oblien-runtime
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of oblien-runtime, providing a complete Oblien workspace environment: - Run in an isolated Firecracker microVM with persistent, writable filesystem, dedicated resources, and outbound internet by default. - Expose a full Internal API on port 9990: file operations, code search, command execution, terminal access, and real-time file watching. - Support two authentication methods: Gateway JWT for external access, and raw token for direct, workspace-to-workspace communication. - Detailed connection setup, token management, and step-by-step guides included. - Compatible with multiple platforms including claude-code, cursor, openclaw, goose, and jetbrains-ai.
Metadata
Slug oblien-runtime
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Oblien workspace runtime?

Complete Oblien workspace environment — what you are running inside (Firecracker microVM), how auth works (gateway JWT vs raw token), and the full Internal A... It is an AI Agent Skill for Claude Code / OpenClaw, with 267 downloads so far.

How do I install Oblien workspace runtime?

Run "/install oblien-runtime" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Oblien workspace runtime free?

Yes, Oblien workspace runtime is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Oblien workspace runtime support?

Oblien workspace runtime is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Oblien workspace runtime?

It is built and maintained by Hydra de lerne (@hydralerne); the current version is v1.0.0.

💬 Comments