← Back to Skills Marketplace
lilyjazz

hive-mind

by Lux · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
660
Downloads
0
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install hive-mind
Description
Sync memories across multiple agents using a shared TiDB Zero database.
README (SKILL.md)

Hive Mind (Powered by TiDB Zero)

Overview

Hive Mind is a shared configuration store for your AI Agent. It acts like an "iCloud Keychain" for agent settings and user preferences, syncing them across all your devices instantly.

Security & Provisioning

This skill supports two modes:

  1. BYO Database (Recommended): Provide TIDB_* credentials via environment variables.
  2. Auto-Provisioning (Fallback): If no credentials are provided, it calls the TiDB Zero API to create a free, ephemeral database and caches the connection locally (~/.openclaw_hive_mind_dsn).

Why use this?

  • Sync: Update your preferred theme ("Dark Mode") on your Desktop, and your Mobile Agent respects it immediately.
  • Persistent Preferences: Settings survive container restarts and clean reinstalls.
  • Team Collaboration: Share common configuration across multiple agents in a team.

Prerequisites

  • TiDB Zero: Requires a serverless cluster.
  • Protocol: Follow the installation guide below to add it to your agent's PROTOCOL.md.

Installation

1. Add to TOOLS.md

- **hive-mind**: Store/Retrieve persistent key-value preferences.
  - **Location:** `{baseDir}/skills/hive_mind/SKILL.md`
  - **Command:** `python {baseDir}/skills/hive_mind/run.py --action set --key "theme" --value "dark"`

2. Add to AGENTS.md (Protocol)

Copy PROTOCOL.md.

Usage

  • Set: python {baseDir}/run.py --action set --key "user.timezone" --value "UTC"
  • Get: python {baseDir}/run.py --action get --key "user.timezone"
  • List: python {baseDir}/run.py --action list -> Returns all stored preferences.
Usage Guidance
This skill appears to be what it says: a TiDB-backed shared preference store. Before installing or using it, consider the following: (1) Use BYO Database credentials if you want control—avoid the auto-provisioning flow if you don't trust the external provider. (2) The script caches the DSN unencrypted at ~/.openclaw_hive_mind_dsn; ensure that file has restrictive permissions (e.g., chmod 600) or avoid persisting secrets there. (3) Dependencies: pymysql is required but no installer is provided—install dependencies in a controlled environment. (4) The PROTOCOL instructs the agent to 'remember' arbitrary user facts; avoid storing secrets (API keys, passwords) in this store. (5) Review the run.py code and the remote provisioning endpoint (https://zero.tidbapi.com) yourself; if you are unsure about the remote service's trustworthiness, disable auto-provisioning or restrict network access. If you want greater assurance, have an admin provision a dedicated TiDB instance and supply credentials via environment variables rather than relying on auto-creation.
Capability Analysis
Type: OpenClaw Skill Name: hive-mind Version: 1.0.0 The skill is classified as suspicious due to its use of high-risk capabilities, specifically making external network calls via `curl` to provision a database and storing database credentials (DSN) in an unencrypted plaintext file (`~/.openclaw_hive_mind_dsn`) on the local filesystem. While the `curl` command in `run.py` is hardcoded to a legitimate API endpoint and the credential storage is for the skill's own operation, these actions represent significant security risks. The local storage of credentials could be exploited if the agent's environment is compromised, and the external network call, even if currently benign, demonstrates a capability that could be misused in other contexts. There is no evidence of intentional malicious behavior like data exfiltration of unrelated secrets or arbitrary code execution, and the prompt instructions in `SKILL.md` and `PROTOCOL.md` align with the stated purpose.
Capability Assessment
Purpose & Capability
The skill claims to sync preferences using TiDB Zero and indeed requests TiDB host/port/user/password and uses a MySQL connector (pymysql). Required binaries (python3, curl) are used by the included run.py (curl for auto-provisioning). The stored-file DSN and the DB schema are consistent with the stated purpose.
Instruction Scope
SKILL.md and PROTOCOL.md instruct the agent to store arbitrary user preferences and to call run.py for set/get/list operations, which is consistent. However the protocol allows storing arbitrary user-provided facts (e.g., names, preferences) which could include sensitive secrets if the agent is instructed to remember them. The auto-provisioning flow contacts an external TiDB Zero API and caches the returned DSN locally (~/.openclaw_hive_mind_dsn).
Install Mechanism
There is no install spec; this is mostly instruction-only with a Python script and a requirements.txt (pymysql). That lowers installer risk, but also means dependencies must be managed externally (the skill prints an error if pymysql is missing). The script invokes curl via subprocess to a public TiDB Zero endpoint (https://zero.tidbapi.com), which is a network call to a third-party service.
Credentials
Requested env vars (TIDB_HOST, TIDB_PORT, TIDB_USER, TIDB_PASSWORD) are appropriate for a DB-backed sync. These are sensitive credentials and the skill persists connection strings to a plaintext file in the user's home directory. The number and type of env vars are proportionate, but storing them unencrypted (and auto-caching DSNs returned by the external API) raises confidentiality concerns.
Persistence & Privilege
The skill does not request always:true or modify other skills. It does persist a DSN in ~/.openclaw_hive_mind_dsn, which creates on-disk persistence of credentials/connection strings. That persistent file could be read by other processes/users if filesystem permissions are not restrictive.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install hive-mind
  3. After installation, invoke the skill by name or use /hive-mind
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
v1.0.0: Official release
v0.0.1
Initial release via Agent Cloud Memory automation
Metadata
Slug hive-mind
Version 1.0.0
License
All-time Installs 1
Active Installs 1
Total Versions 2
Frequently Asked Questions

What is hive-mind?

Sync memories across multiple agents using a shared TiDB Zero database. It is an AI Agent Skill for Claude Code / OpenClaw, with 660 downloads so far.

How do I install hive-mind?

Run "/install hive-mind" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is hive-mind free?

Yes, hive-mind is completely free (open-source). You can download, install and use it at no cost.

Which platforms does hive-mind support?

hive-mind is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created hive-mind?

It is built and maintained by Lux (@lilyjazz); the current version is v1.0.0.

💬 Comments