← Back to Skills Marketplace
stingan

Ceo Notify Agents

by Stingan · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
343
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install ceo-notify-agents
Description
Automation skill for Ceo Notify Agents.
README (SKILL.md)

name: ceo-notify-agents description: CEO向其他Agent发送通知(通过共享记忆文件) triggers:

  • "通知 {targetAgents} {message}"

  • "告诉 {targetAgents} {message}"

  • "提醒 {targetAgents} {message}"

  • "给 {targetAgents} 发消息 {message}"

  • "请通知 {targetAgents} {message}"

  • "通知一下 {targetAgents} {message}"

  • "让 {targetAgents} 知道 {message}" requires: [] actions:

  • name: write_notification tool: exec params: command: | #!/bin/bash TARGETS="{{targetAgents}}" MESSAGE="{{message}}" NOTIFICATION_DIR="/Users/anran/Documents/openclaw/shared_memory/notifications" TIMESTAMP=$(date +%Y%m%d_%H%M%S)

    mkdir -p "$NOTIFICATION_DIR"
    
    IFS=',' read -ra AGENTS \x3C\x3C\x3C "$TARGETS"
    for raw in "${AGENTS[@]}"; do
      agent=$(echo "$raw" | xargs)
      echo "$TIMESTAMP: $MESSAGE" >> "$NOTIFICATION_DIR/${agent}.log"
    done
    
    echo "$TIMESTAMP: 通知 $TARGETS - $MESSAGE" >> "$NOTIFICATION_DIR/all.log"
    
    /Users/anran/.npm-global/bin/openclaw memory index --agent main
    
    echo "通知已写入共享记忆,目标Agent下次对话时将看到。"
    
Usage Guidance
This skill writes notification files to hard-coded user paths and runs an absolute openclaw CLI binary—things that should be configurable. Before installing: verify the skill's source/author; do not install if you don't trust them. If you want to use it, ask the author to (1) replace hard-coded paths with configurable env vars or relative paths, (2) avoid absolute references to a single user's home and to ~/.npm-global, and (3) document the required runtime binary and permissions. Run the skill in a sandbox or test environment first to confirm it only writes the files you expect. If you cannot get a trustworthy author or safer config, treat this as risky because it can modify files and trigger indexing of agent memory.
Capability Analysis
Type: OpenClaw Skill Name: ceo-notify-agents Version: 1.0.0 The skill 'ceo-notify-agents' in SKILL.md contains a critical command injection vulnerability because it directly embeds unsanitized user input ({{targetAgents}} and {{message}}) into a bash script executed via the 'exec' tool. While the intended purpose of inter-agent communication via shared memory files appears functional, the implementation allows for arbitrary shell command execution. The script also relies on hardcoded absolute paths (e.g., /Users/anran/...) which is a security anti-pattern and indicates a brittle, environment-specific configuration.
Capability Assessment
Purpose & Capability
The declared purpose is to notify other agents by writing shared-memory notification files, and the SKILL.md does exactly that. However the implementation uses hard-coded, user-specific absolute paths (/Users/anran/...) and a fixed binary location for openclaw, which is not coherent for a reusable or general-purpose skill.
Instruction Scope
Runtime instructions run a shell script that creates files under a specific Documents path and appends messages to per-agent logs and an all.log, then calls an absolute openclaw CLI path to index memory. These actions are within the stated notification scope but reference specific filesystem locations and execute a binary at a hard-coded path—both of which expand privilege and risk and are not declared or configurable in the skill.
Install Mechanism
This is an instruction-only skill with no install spec or downloaded code, which minimizes install-time risk. Nothing is written by an installer, but the runtime exec action will write files when invoked.
Credentials
The skill requests no environment variables or credentials, yet it assumes access to /Users/anran/... and to /Users/anran/.npm-global/bin/openclaw. That mismatch (no declared required env/config but reliance on user-specific paths) is disproportionate and brittle; it could fail or inadvertently manipulate files in that user's home if run in a different environment.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. Its main persistent effect is writing notification files and invoking the OpenClaw memory indexer, which is consistent with its function but should be scoped via configuration rather than fixed paths.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install ceo-notify-agents
  3. After installation, invoke the skill by name or use /ceo-notify-agents
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of ceo-notify-agents skill. - Allows the CEO to send notifications to other Agents via shared memory files. - Supports multiple trigger phrases in natural Chinese for flexible invocation. - Notifications are written into dedicated log files per target Agent and an overall log. - Ensures that notifications are indexed for future retrieval by Agents.
Metadata
Slug ceo-notify-agents
Version 1.0.0
License
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is Ceo Notify Agents?

Automation skill for Ceo Notify Agents. It is an AI Agent Skill for Claude Code / OpenClaw, with 343 downloads so far.

How do I install Ceo Notify Agents?

Run "/install ceo-notify-agents" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Ceo Notify Agents free?

Yes, Ceo Notify Agents is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Ceo Notify Agents support?

Ceo Notify Agents is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Ceo Notify Agents?

It is built and maintained by Stingan (@stingan); the current version is v1.0.0.

💬 Comments