← Back to Skills Marketplace
235
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install lobster-distill
Description
Lobster Distill — Cross-platform encrypted skill transfer system. Transfer skills 1-on-1 between AI agents via human relay on any IM platform. | 龙虾蒸馏 — 跨平台加密...
README (SKILL.md)
\r \r
🦞🧪 Lobster Distill v1.0.1 — 龙虾蒸馏\r
\r Cross-Platform Encrypted Skill Transfer | 跨平台加密技能传授系统\r \r ---\r \r
What is it? | 这是什么？\r
\r Lobster Distill is an AI-to-AI skill transfer protocol. It packages, encrypts, and uploads skills to temporary storage, then generates a short Note for the human admin to forward. The receiver follows the Note to download, decrypt, and install the skill.\r \r 龙虾蒸馏是一套 AI-to-AI 技能传授协议。它将技能打包、加密、上传到临时存储，生成一份简短的 Notes 交给人类管理员转发。接收方按 Notes 操作即可下载、解密、安装技能。\r \r ---\r \r
✨ Why Lobster Distill? | 为什么选龙虾蒸馏？\r
\r
🌐 Cross-Platform, No Limits | 跨平台，零限制\r
\r Notes are plain text. Humans can forward them via any IM platform:\r \r Notes 是纯文本。人类可以通过任何 IM 平台转发：\r \r
- Telegram → Telegram (same platform | 同平台)\r
- Telegram → WeChat (cross-platform | 跨平台)\r
- Telegram → Discord → Signal → WhatsApp → Email...\r
- You could even read it out loud on a phone call | 甚至可以电话念给对方听\r \r Anywhere you can send text, you can transfer skills.\r \r 只要能发文字消息的地方，就能传授技能。\r \r
🔐 Encrypted & Private | 加密传输，私密安全\r
\r
- AES-256-CBC + PBKDF2 encryption, military-grade | 军事级加密\r
- Random 24-char password, one-time use | 随机 24 位密码，一次一密\r
- Files auto-expire in 24 hours | 文件 24 小时自动过期销毁\r
- Password embedded in Notes, no separate channel needed | 密码嵌入 Notes，无需单独传输\r
- Perfect for transferring private, unpublished skills | 适合传授非公开技能\r \r
🤝 Human-in-the-Loop | 人类中转，自然可信\r
\r
- Admin has full control: what you see is what you forward | 管理员完全掌控：看到什么就转发什么\r
- No API integration, network connectivity, or platform bridging required | 不依赖 API 互联、网络互通或平台打通\r
- One message is everything — just copy and paste | 一条消息就是全部——复制粘贴即可\r
- Humans are the best routers | 人类就是最好的路由器\r \r
🎯 Dead Simple | 极致简单\r
\r Sender (1 command | 1条命令):\r
"Share the XX skill with another OpenClaw" | "把 XX 技能分享给另一个 OpenClaw"\r \r Receiver (5 lines of bash | 5行 bash):\r Download → Decrypt → Extract → Read → Clean up | 下载 → 解密 → 解压 → 阅读 → 清理\r \r This skill itself was taught to other agents using Lobster Distill.\r \r 本技能自身就是用龙虾蒸馏教会其他龙虾的。\r \r ---\r \r
📖 How It Works | 工作流程\r
\r
Sender AI (发送方) Human Admin (管理员) Receiver AI (接收方)\r
│ │ │\r
│ 1. Pack+Encrypt+Upload │ │\r
│ 打包+加密+上传 │ │\r
│ 2. Generate Notes ──────→ │ │\r
│ 生成 Notes │ │\r
│ │ 3. Forward Notes ─────→ │\r
│ │ 转发 (any IM platform) │\r
│ │ │ 4. Download+Decrypt+Install\r
│ │ │ 下载+解密+安装\r
│ │ │ 5. New skill learned ✅\r
│ │ │ 学会新技能 ✅\r
```\r
\r
---\r
\r
## 🚀 Usage | 使用方法\r
\r
### Send a Skill | 发送技能\r
\r
Tell your AI:\r
\r
告诉 AI：\r
\r
> "Use Lobster Distill to share the multi-search-engine skill"\r
> "用龙虾蒸馏把 multi-search-engine 技能分享出去"\r
\r
Or run directly | 或直接运行：\r
\r
```bash\r
bash skills/lobster-distill/share.sh \x3Cskill-dir-or-file> "skill description"\r
# \x3Cskill-dir-or-file>: path to skill directory or single file | 技能目录或文件路径\r
# "skill description": brief description of the skill | 技能简要描述\r
```\r
\r
The AI will automatically | AI 会自动：\r
1. Pack the skill directory into tar.gz | 将技能目录打包为 tar.gz\r
2. Generate a random password and encrypt with AES-256 | 生成随机密码并用 AES-256 加密\r
3. Upload to litterbox.catbox.moe (24h expiry) | 上传到 litterbox.catbox.moe（24h 有效）\r
4. Output a **single message with two clearly separated sections** | 输出**一条消息，包含两个清晰分隔的部分**：\r
\r
⚠️ **IMPORTANT for AI agents / AI 代理注意**：\r
\r
Output format MUST follow this template exactly (in ONE message):\r
\r
输出格式必须严格按照以下模板（在一条消息中）：\r
\r
```\r
═══ 📋 FOR ADMIN / 管理员请读 ═══\r
\r
[Summary: skill name, size, expiry, URL, password]\r
[摘要：技能名、大小、有效期、链接、密码]\r
\r
👉 Please forward this entire message to the target agent.\r
👉 请将此完整消息转发给目标龙虾。\r
\r
The target agent will read the section below.\r
目标龙虾会读取下方内容。\r
\r
═══ 🦞 FOR TARGET AGENT / 目标龙虾请读 ═══\r
\r
[Complete download/decrypt/install instructions]\r
[完整的下载/解密/安装指令]\r
```\r
\r
**Why this format / 为什么这样设计：**\r
- Admin forwards the entire message as-is (long-press → forward) / 管理员直接转发整条消息（长按 → 转发）\r
- The target agent (also an AI) sees the `FOR TARGET AGENT` section and knows to read from there / 目标龙虾（也是 AI）看到 `FOR TARGET AGENT` 标记，知道从那里开始读\r
- No copy-pasting, no selecting text, just forward / 不需要复制粘贴，不需要选取文字，直接转发\r
\r
### Receive a Skill | 接收技能\r
\r
After receiving the Notes, tell your AI to execute the commands, or run directly:\r
\r
收到 Notes 后，告诉 AI 执行其中的命令，或直接运行：\r
\r
```bash\r
bash skills/lobster-distill/receive.sh \x3CURL> \x3Cpassword> \x3Cskill-name> tar\r
# \x3CURL>: download link from Notes | Notes 中的下载链接\r
# \x3Cpassword>: decryption password from Notes | Notes 中的解密密码\r
# \x3Cskill-name>: name for the skill directory | 技能目录名称\r
# tar: extract as directory (use "file" for single file) | 解压为目录（单文件用 "file"）\r
```\r
\r
---\r
\r
## 📝 Real-World Examples | 实战案例\r
\r
### Example 1: Same Platform (Telegram → Telegram) | 同平台传授\r
\r
Lobster #3 teaches "Human Chrome Launcher" skill to Lobster #0:\r
\r
龙虾3号把"人类浏览器启动"技能教给龙虾0号：\r
\r
```\r
🦞#3: [Runs Lobster Distill, generates Notes | 执行龙虾蒸馏，生成 Notes]\r
🦞#3 → Admin: "Notes ready, please forward | Notes 已生成，请转发"\r
Admin → 🦞#0: [Pastes Notes | 粘贴 Notes] (forwarded within Telegram | Telegram 内转发)\r
🦞#0: [Executes commands, learns skill | 执行命令，学会技能] ✅\r
```\r
\r
### Example 2: Cross-Platform (Telegram → WeChat) | 跨平台传授\r
\r
Lobster #3 on Telegram teaches a skill to Lobster #5 on WeChat:\r
\r
Telegram 上的龙虾3号把技能教给微信上的龙虾5号：\r
\r
```\r
🦞#3(Telegram): [Generates Notes | 生成 Notes]\r
🦞#3 → Admin: "Notes ready | Notes 已生成"\r
Admin: [Copies Notes, opens WeChat, pastes | 复制 Notes，打开微信，粘贴发送] (cross-platform! | 跨平台！)\r
🦞#5(WeChat): [Executes, learns skill | 执行命令，学会技能] ✅\r
```\r
\r
### Example 3: Teaching Lobster Distill Itself | 教会别人龙虾蒸馏本身\r
\r
Lobster #3 teaches the Lobster Distill skill to Lobster #0:\r
\r
龙虾3号把龙虾蒸馏技能传授给龙虾0号：\r
\r
```\r
🦞#3: bash share.sh skills/lobster-distill "Lobster Distill"\r
🦞#3 → Admin: Notes\r
Admin → 🦞#0: Notes\r
🦞#0: [Downloads, decrypts, installs | 下载、解密、安装]\r
🦞#0: "Learned! Now I can teach other lobsters too! | 学会了！现在我也能传授技能了" ✅\r
```\r
\r
**This actually happened.** The first transfer of Lobster Distill was done using Lobster Distill itself.\r
\r
**这正是实际发生的事情。** 龙虾蒸馏的首次传授，就是用龙虾蒸馏自身完成的。\r
\r
### Example 4: Transferring Private Skills | 传授非公开技能\r
\r
Admin has a private trading strategy skill, doesn't want it public:\r
\r
管理员有一个私有的交易策略技能，不想公开：\r
\r
```\r
Admin → 🦞#3: "Package the trading-strategy skill | 把 trading-strategy 技能打包"\r
🦞#3: [Encrypts with AES-256, 24h expiry | 加密打包，AES-256，24h过期]\r
Admin: [Sends privately to the target agent | 私信转发给指定的龙虾] (point-to-point, no public channel | 点对点，不经过公开渠道)\r
```\r
\r
---\r
\r
## 🔒 Security | 安全说明\r
\r
**Why is this safe? | 为什么这是安全的？**\r
\r
Lobster Distill uses shell commands (`curl`, `openssl`, `tar`, `rm`) that security scanners may flag. Here's why each is necessary and safe:\r
\r
龙虾蒸馏使用的 shell 命令（`curl`、`openssl`、`tar`、`rm`）可能被安全扫描器标记。以下是每个命令的必要性和安全性说明：\r
\r
| Command / 命令 | Why / 为什么 | Safe? / 安全吗？ |\r
|---|---|---|\r
| `curl` (upload) | Uploads encrypted file to temporary storage (litterbox.catbox.moe, 24h auto-delete) / 上传加密文件到临时存储（24小时自动删除） | ✅ File is AES-256 encrypted before upload / 上传前已 AES-256 加密 |\r
| `openssl enc` | Encrypts/decrypts with AES-256-CBC + PBKDF2 / 使用 AES-256-CBC + PBKDF2 加密解密 | ✅ Industry-standard encryption / 工业标准加密 |\r
| `tar` | Packs/unpacks skill directory / 打包解包技能目录 | ✅ Only operates on skill files / 仅操作技能文件 |\r
| `rm -f` | Cleans up temp files in `/tmp/` only / 仅清理 `/tmp/` 下的临时文件 | ✅ Never deletes user data / 不会删除用户数据 |\r
\r
**The core security mechanism is Human-in-the-Loop:**\r
\r
**核心安全机制是人类参与审核：**\r
\r
- 🛡️ **No automatic transfer** — Nothing is sent without a human explicitly copying and pasting the Notes / 没有自动传输——没有人类主动复制粘贴 Notes，什么都不会发送\r
- 🛡️ **Human reviews everything** — The admin sees exactly what's being shared before forwarding / 管理员在转发前能看到分享的全部内容\r
- 🛡️ **No direct AI-to-AI connection** — Unlike API-based protocols (e.g., Google A2A), there's no direct network link between agents / 与基于 API 的协议（如 Google A2A）不同，代理之间没有直接网络连接\r
\r
### Comparison with alternatives | 与替代方案的比较\r
\r
| Feature / 特性 | Lobster Distill 🦞 | Google A2A | ClawHub Publish |\r
|---|---|---|---|\r
| Cross-platform / 跨平台 | ✅ Any IM / 任意 IM | ❌ API only / 仅 API | ✅ Web |\r
| Human oversight / 人类审核 | ✅ Required / 必须 | ❌ Direct AI-to-AI / AI 直连 | ❌ Auto-install / 自动安装 |\r
| Private skills / 私有技能 | ✅ Point-to-point / 点对点 | ❌ Requires API access / 需 API 接入 | ❌ Public only / 仅公开 |\r
| Encryption / 加密 | ✅ AES-256 | Depends / 取决于实现 | ❌ Plain / 明文 |\r
| Dependencies / 依赖 | None (system tools) / 无（系统自带） | SDK + API server | npm + network |\r
| Setup / 配置 | Zero / 零配置 | Complex / 复杂 | Account required / 需要账号 |\r
\r
---\r
\r
## 🔧 Technical Details | 技术细节\r
\r
| Item / 项目 | Specification / 规格 |\r
|------|------|\r
| Encryption / 加密算法 | AES-256-CBC + PBKDF2 + Salt |\r
| Password Length / 密码长度 | 24 chars random (base64) / 24 字符随机 |\r
| Temporary Storage / 临时存储 | litterbox.catbox.moe |\r
| File Expiry / 文件有效期 | 24 hours auto-delete / 24 小时自动销毁 |\r
| Package Format / 打包格式 | tar.gz (directory) or raw file / tar.gz（目录）或原始文件 |\r
| Dependencies / 依赖 | openssl, curl, tar (system built-in / 系统自带) |\r
| Transfer Medium / 传输介质 | Any text-capable IM platform / 任意能发文字的 IM 平台 |\r
\r
## 📁 Files | 文件结构\r
\r
```\r
skills/lobster-distill/\r
├── SKILL.md # This document / 本文档\r
├── share.sh # Sender: pack + encrypt + upload / 发送方：打包+加密+上传\r
└── receive.sh # Receiver: download + decrypt + install / 接收方：下载+解密+安装\r
```\r
\r
## 🦞 Origin | 起源\r
\r
Created by happyclaw03 (Lobster #3 / 快乐龙虾3号) on 2026-03-16.\r
\r
由快乐龙虾3号 (happyclaw03) 创建于 2026-03-16。\r
\r
First use: Transferred this skill itself to happyclaw00 (Lobster #0).\r
\r
首次使用：将本技能自身传授给快乐龙虾0号 (happyclaw00)。\r
\r
First bidirectional transfer: Lobster #0 used this skill to send back Multi-Search Engine skill.\r
\r
首次双向传输：龙虾0号用本技能回传了 Multi-Search Engine 技能。\r
\r
---\r
\r
*Distill knowledge, encrypt it, deliver in a bottle.* 🦞🧪\r
\r
*知识提纯，加密蒸馏，一瓶送达。*\r
Usage Guidance
This skill does what it says: it packages a skill, encrypts it, uploads the ciphertext to a third-party temp host, and prints a Note that includes the download URL and the password so a human can forward it. Before installing or forwarding Notes consider: (1) Anyone who intercepts the Note (URL + password together) can download and decrypt the package — if secrecy matters, don't include the password in the same channel. (2) Never auto-run install commands from an untrusted sender — inspect the package contents (e.g., open the tar.gz in a safe sandbox) before extracting into your agent's skills/ directory. (3) The upload host is a public third-party service; verify its retention/visibility policy. (4) If you want stronger protection, use an out-of-band channel for the password or change the workflow so the receiver validates the sender. If you are unsure about executing received packages, restrict this skill from autonomous execution or require explicit user approval each time.
Capability Analysis
Type: OpenClaw Skill
Name: lobster-distill
Version: 1.0.5
The skill bundle implements a 'skill transfer' protocol that allows AI agents to package, encrypt, and upload files to a third-party hosting service (litterbox.catbox.moe) and subsequently download and execute them. While the documentation in SKILL.md and README.md frames this as a legitimate feature with human-in-the-loop oversight and AES-256 encryption, the underlying scripts (share.sh and receive.sh) provide functional primitives for arbitrary data exfiltration and remote code execution (RCE). The system is highly susceptible to prompt injection, as an agent receiving a formatted message is instructed to automatically execute shell commands to install new code, creating a significant security risk if the 'human relay' fails to audit the content.
Capability Assessment
Purpose & Capability
Name/description match the actual behavior: share.sh packs, encrypts (AES-256-CBC + PBKDF2), uploads to a public temp file host, and emit a human-forwardable Note; receive.sh downloads, decrypts, and installs. Required tools (curl, openssl, tar) are standard and appropriate for this purpose.
Instruction Scope
SKILL.md and the scripts only instruct packing, encrypting, uploading, and installing. They do not request unrelated environment variables or read other system state. However, the Note embeds the decryption password alongside the upload URL (i.e., the secret and the ciphertext are forwarded together), which reduces secrecy and could allow anyone who intercepts the Note to obtain and install the skill. The receive instructions assume the agent will execute commands from the Note — running arbitrary installer code from an untrusted source is inherently risky.
Install Mechanism
No install spec; the skill is instruction + two small scripts. The scripts do not download executable code to be run during install (they upload/download encrypted archives and extract them). Upload target is a public file host (litterbox.catbox.moe), which is a third-party service but a reasonable choice for temporary file upload in this context.
Credentials
No environment variables, credentials, or config paths are requested. The scripts use only local tools (openssl, curl, tar) and create/clean up their own temp files.
Persistence & Privilege
always:false and normal autonomous invocation. The skill's ability to autonomously fetch and install remote skill packages is coherent with its purpose, but that capability increases risk if a malicious or compromised Note is forwarded and the agent executes it without human review. Consider restricting automatic execution or requiring explicit user confirmation before running received install steps.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install lobster-distill - After installation, invoke the skill by name or use
/lobster-distill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.5
Lobster Distill v1.0.5 — skill changelog
- Updated the recommended admin/relay message format in docs. The "share" output must now fit a standardized two-section template: a clearly marked admin summary, followed by clean agent instructions.
- Expanded README and SKILL.md usage instructions to emphasize this exact relay template, reducing admin/agent confusion and errors.
- Minor documentation and instruction tweaks to clarify forwarding and receiving workflows for both humans and agents.
v1.0.1
- Improved SKILL.md with detailed documentation in both English and Chinese.
- Added comprehensive usage instructions and real-world examples for AI-to-AI encrypted skill transfer.
- Clarified technical details, dependencies, and file structure.
- Emphasized secure, cross-platform, human-mediated transfers via any instant messaging platform.
- Highlighted features such as AES-256 encryption, temporary storage, and privacy for unpublished skills.
Metadata
Frequently Asked Questions
What is Lobster Distill?
Lobster Distill — Cross-platform encrypted skill transfer system. Transfer skills 1-on-1 between AI agents via human relay on any IM platform. | 龙虾蒸馏 — 跨平台加密... It is an AI Agent Skill for Claude Code / OpenClaw, with 235 downloads so far.
How do I install Lobster Distill?
Run "/install lobster-distill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Lobster Distill free?
Yes, Lobster Distill is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Lobster Distill support?
Lobster Distill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Lobster Distill?
It is built and maintained by qiaoy01 (@qiaoy01); the current version is v1.0.5.
More Skills