← Back to Skills Marketplace
erongcao

虚拟论坛

by Yirong · GitHub ↗ · v5.0.3 · MIT-0
cross-platform ⚠ suspicious
78
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install virtual-forum
Description
虚拟论坛:让蒸馏的人物Skill就特定话题展开讨论。 v5.0使用Claude Code CLI实现真正的多agent并行辩论。 内置博弈论分析模块(信号博弈、议价博弈、联盟博弈、行为经济学)。 触发词:「虚拟论坛」「发起讨论」「圆桌会议」「辩论」「主持讨论」「让XX YY讨论」
Usage Guidance
This skill is coherent with its purpose (it needs persona text to simulate participants) but it will read local SKILL.md files and send their contents to an external Claude service via the Claude Code CLI. Before installing or running it: 1) Do not keep secrets, API keys, or credentials inside any SKILL.md or untrusted files in your skills directory; sanitize or remove sensitive data. 2) Inspect v5/debate_parallel.sh and shared loadSkill() to confirm which paths are read and how prompts are constructed. 3) Be aware you must install and authenticate the external 'claude' CLI (which uses its own API key) — the skill does not declare that credential requirement in the registry metadata. 4) If you want to test safely, run the skill in an isolated environment or container, point SKILLS_DIR to a sanitized copy containing only persona texts, and set OUTPUT_DIR to a controlled folder. 5) If you cannot guarantee SKILL.md files are free of secrets, avoid running the parallel‑Claude mode or modify the script to avoid transmitting raw skill files (e.g., extract only allowed fields or use local-only simulation).
Capability Analysis
Type: OpenClaw Skill Name: virtual-forum Version: 5.0.3 The skill implements a 'Virtual Forum' that intentionally reads the full content of other skills from the user's local directory (~/.openclaw/workspace/skills) and transmits them to an external service via the 'claude' CLI, as documented in the security warning in SKILL.md and implemented in v5/debate_parallel.sh. While this is presented as a feature for multi-agent debates, it facilitates the exfiltration of potentially sensitive data (such as mental models or API keys) stored in other skills. Furthermore, CHANGELOG.md explicitly states that the v5.0 architecture is designed to 'completely bypass OpenClaw sessions limits' by using external shell scripts, which is a technique used to evade platform-imposed security and resource constraints.
Capability Tags
cryptocan-make-purchases
Capability Assessment
Purpose & Capability
The name/description (multi‑agent virtual forum that uses distilled persona Skills) matches the code and scripts: it loads other Skills (SKILL.md) and composes system prompts to drive Claude Code processes. That behavior is coherent with the stated purpose. Minor inconsistency: the package/registry metadata declares no required env vars or binaries, but the README/SKILL.md and scripts require the Claude Code CLI and configured API auth.
Instruction Scope
SKILL.md and v5/debate_parallel.sh explicitly read local SKILL.md files (e.g., ~/.openclaw/.../SKILL.md), inject their contents into system prompts, and send them to an external model via the Claude CLI. That means arbitrary local Skill content (and anything embedded in those files) will be transmitted to an external service. The SKILL.md does warn about this, but the runtime instructions give the agent broad discretion to load and forward local skill files and to construct system prompts — this is beyond simple internal computation and is sensitive by nature.
Install Mechanism
No install spec is included (instruction/code bundle only), which reduces supply‑chain risk. However the README instructs users to install an external Claude Code CLI (brew or npm) and to run debate_parallel.sh which will spawn external processes. There are no downloads from untrusted URLs in the bundle itself. The missing formal declaration of required external CLI in the registry metadata is a practical shortcoming.
Credentials
The skill asks users (in docs) to set SKILLS_DIR and OUTPUT_DIR and requires a configured Claude CLI/API key, but the registry metadata lists no required env vars/credentials. The skill will read arbitrary files under the user's skills directory (SKILL.md of other persona Skills) which may contain secrets or API keys if users put them there. While reading persona Skill files is functionally necessary, transmitting them to an external API is high‑sensitivity and should be explicitly declared and minimized.
Persistence & Privilege
The skill does not request always:true and does not modify other skills' configurations according to the provided files. It writes outputs to an output directory and uses temporary files; nothing in the manifest suggests it gains elevated or permanent platform privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install virtual-forum
  3. After installation, invoke the skill by name or use /virtual-forum
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v5.0.3
v5.0.3: 重组目录,博弈论移至v5/game-theory/
v5.0.2
安全修复:移除硬编码路径,添加安全警告
v5.0.1
v5.0.1: 修复语法错误和增强错误处理
Metadata
Slug virtual-forum
Version 5.0.3
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is 虚拟论坛?

虚拟论坛:让蒸馏的人物Skill就特定话题展开讨论。 v5.0使用Claude Code CLI实现真正的多agent并行辩论。 内置博弈论分析模块(信号博弈、议价博弈、联盟博弈、行为经济学)。 触发词:「虚拟论坛」「发起讨论」「圆桌会议」「辩论」「主持讨论」「让XX YY讨论」. It is an AI Agent Skill for Claude Code / OpenClaw, with 78 downloads so far.

How do I install 虚拟论坛?

Run "/install virtual-forum" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is 虚拟论坛 free?

Yes, 虚拟论坛 is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does 虚拟论坛 support?

虚拟论坛 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created 虚拟论坛?

It is built and maintained by Yirong (@erongcao); the current version is v5.0.3.

💬 Comments