Vinculum - Shared Consciousness

Shared consciousness between Clawdbot instances. Links multiple bots into a collective, sharing memories, activities, and decisions in real-time over local network using Gun.js P2P sync.

Key things to consider before installing: - Metadata mismatch: the registry lists no required binaries/install spec, but SKILL.md and package.json require Node.js (>=18) and npm and instruct you to run npm install. Ensure Node/npm are present and that you run installation in a controlled environment. - Network exposure: the skill launches a relay server (default port 8765) and will accept peer URLs you configure. If you add a remote peer that is reachable on the internet or an untrusted host, your shared-memory data (activity, learned knowledge, decisions) can be replicated to that host. Only join collectives and add peers you trust. - Pairing codes: invite/pairing codes grant read/write access to the collective. Treat them like secrets — anyone with a code can modify the shared state. - Data persistence: the skill stores data and logs under your home directory (~/.local/... and ~/.config/...). If you want to limit persistence, inspect the data_dir and storage locations in defaults.yaml and consider running the skill in a sandbox, container, or VM. - Review missing/truncated files: some implementation files were truncated in the provided package; if you plan to use this, review relay-simple.js and the gun-adapter implementation fully to confirm no unexpected network calls or remote endpoints are hardcoded. - Safe deployment recommendations: run initial testing on an isolated machine or inside a container, ensure your firewall blocks unwanted external access to the relay port, and only generate/share pairing codes with machines/users you control. If you want, I can: - Walk through the relay script and gun-adapter for code-level review of networking and persistence behavior (the repo listing included truncated files that I can inspect if you provide them), or - Produce a checklist to sandbox this skill safely before enabling it in a production agent.

Type: OpenClaw Skill Name: vinculum Version: 1.2.0 The OpenClaw AgentSkills skill bundle 'vinculum' is designed for shared consciousness between Clawdbot instances using Gun.js P2P sync over a local network. The code and documentation clearly align with this stated purpose. It uses standard Node.js practices for managing a local relay daemon (e.g., `child_process.spawn` in `scripts/commands/relay.js` and `scripts/index.js` to run `scripts/relay-simple.js`), persistent configuration (`~/.config/clawdbot/vinculum.yaml`), and data storage (`~/.local/share/clawdbot/vinculum`). The `SKILL.md` and `README.md` explicitly state that sensitive data like `USER.md`, `SOUL.md`, and credentials are NOT shared. There is no evidence of data exfiltration, malicious execution, persistence mechanisms beyond the daemon's PID file, obfuscation, or prompt injection attempts to subvert the agent's core directives or access unrelated sensitive data. All file and network access is directly related to the skill's functionality.