← Back to Skills Marketplace
Oracle
by
Peter Steinberger
· GitHub ↗
· v1.0.1
19701
Downloads
17
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install oracle
Description
Use the @steipete/oracle CLI to bundle a prompt plus the right files and get a second-model review (API or browser) for debugging, refactors, design checks, or cross-validation.
Usage Guidance
Install only if you are comfortable trusting the `@steipete/oracle` npm package and sending selected repository files to external AI services. Use `--dry-run` and `--files-report`, keep file globs narrow, exclude `.env`, keys, tokens, and other secrets, and avoid exposing the remote browser host on `0.0.0.0` unless you control the network and token access.
Capability Analysis
Type: OpenClaw Skill
Name: oracle
Version: 1.0.1
The skill is classified as suspicious due to its reliance on `npx -y` to execute an external npm package (`@steipete/oracle`), which introduces a supply chain risk. It performs broad file access (e.g., `src/**`) and sends these files to external AI services via network calls, a high-risk operation despite explicit warnings in SKILL.md against sharing secrets. Additionally, the 'remote browser host' feature allows configuring a server to listen on `0.0.0.0`, which is a broad network exposure.
Capability Assessment
Purpose & Capability
The stated purpose is to bundle selected files and a prompt for second-model review, and the instructions consistently describe that workflow for debugging, refactors, design checks, and cross-validation.
Instruction Scope
The skill advises dry runs, file reports, narrow file selection, excluding secrets, explicit API-run consent, and treating outputs as advisory rather than authoritative.
Install Mechanism
It uses `npx -y @steipete/oracle`, which fetches and runs an external npm CLI. This is disclosed and purpose-aligned, but users must trust that package supply chain.
Credentials
The CLI can read selected local files such as `src/**` and send them to external AI or browser workflows. That access is sensitive but expected for repository-context review, and the skill warns users to avoid secrets and use minimal file sets.
Persistence & Privilege
Browser sessions are stored under `~/.oracle/sessions`, and an optional remote browser host can bind to `0.0.0.0` with a token. These behaviors are disclosed operational features, not hidden persistence or privilege escalation.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install oracle - After installation, invoke the skill by name or use
/oracle - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
v1.0.0
Metadata
Frequently Asked Questions
What is Oracle?
Use the @steipete/oracle CLI to bundle a prompt plus the right files and get a second-model review (API or browser) for debugging, refactors, design checks, or cross-validation. It is an AI Agent Skill for Claude Code / OpenClaw, with 19701 downloads so far.
How do I install Oracle?
Run "/install oracle" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Oracle free?
Yes, Oracle is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Oracle support?
Oracle is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Oracle?
It is built and maintained by Peter Steinberger (@steipete); the current version is v1.0.1.
More Skills