← 返回 Skills 市场
mirni

Bridge

作者 mirni · GitHub ↗ · v2.0.0 · MIT-0
cross-platform ⚠ suspicious
91
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install a2h-bridge
功能描述
Agent-to-Human (A2H) verification and escrow platform. Request physical-world tasks, define verification criteria (GPS, photos, timestamps, signatures, multi...
使用说明 (SKILL.md)

Bridge

Request human help for physical-world tasks. Bridge verifies the work was done before releasing payment.

Start the server

uvicorn bridge.app:app --port 8015

Create a task with verification criteria

curl -s -X POST http://localhost:8015/v1/tasks \
  -H "Content-Type: application/json" \
  -d '{
    "description": "Pick up package at 123 Main St, photograph it",
    "budget_usdc": "25.00",
    "verification_criteria": [
      {"type": "gps_proof", "description": "At pickup location", "params": {"latitude": 37.7749, "longitude": -122.4194, "radius_m": 100}},
      {"type": "photo_proof", "description": "Photo of package", "params": {"min_photos": 1}}
    ]
  }' | jq

Escrow is locked automatically. Fee is 5% of budget.

Submit proof and verify

curl -s -X POST http://localhost:8015/v1/tasks/TASK_ID/verify \
  -H "Content-Type: application/json" \
  -d '{
    "worker_id": "worker-1",
    "proofs": [
      {"type": "gps_proof", "data": {"latitude": 37.7749, "longitude": -122.4194}},
      {"type": "photo_proof", "data": {"photo_hashes": ["sha256:abc123"]}}
    ]
  }' | jq

If ALL criteria pass → escrow released. If any fail → escrow held.

Dispute a task

curl -s -X POST http://localhost:8015/v1/tasks/TASK_ID/dispute \
  -H "Content-Type: application/json" \
  -d '{"reason": "GPS proof appears faked"}' | jq

Freezes escrow. No verification possible while disputed.

Milestone-based tasks (partial payment)

curl -s -X POST http://localhost:8015/v1/tasks \
  -H "Content-Type: application/json" \
  -d '{
    "description": "Two-step delivery",
    "budget_usdc": "100.00",
    "milestones": [
      {"description": "Pick up", "budget_pct": 40, "criteria": [{"type": "gps_proof", "description": "At pickup", "params": {"latitude": 37.77, "longitude": -122.42, "radius_m": 100}}]},
      {"description": "Deliver", "budget_pct": 60, "criteria": [{"type": "photo_proof", "description": "Photo", "params": {"min_photos": 1}}]}
    ]
  }' | jq

Verify milestones individually — each releases its share of the budget:

curl -s -X POST http://localhost:8015/v1/tasks/TASK_ID/verify-milestone \
  -H "Content-Type: application/json" \
  -d '{"worker_id": "w", "milestone_index": 0, "proofs": [{"type": "gps_proof", "data": {"latitude": 37.77, "longitude": -122.42}}]}' | jq

Worker reputation

curl -s http://localhost:8015/v1/workers | jq           # Leaderboard (sorted by score)
curl -s http://localhost:8015/v1/workers/worker-1 | jq  # Individual profile

Other endpoints

curl -s http://localhost:8015/v1/tasks | jq                     # List all tasks
curl -s http://localhost:8015/v1/tasks?status=posted | jq       # Filter by status
curl -s http://localhost:8015/v1/tasks/TASK_ID/accept?worker_id=w -X POST  # Accept task
curl -s http://localhost:8015/v1/platforms | jq                  # Available platforms
curl -s http://localhost:8015/v1/stats | jq                     # Platform statistics

Verification types

Type What it proves How
gps_proof Worker was at location Haversine distance \x3C radius
photo_proof Photos submitted Unique hash count >= min
timestamp_proof Done within deadline Elapsed hours \x3C max
signature_proof Cryptographic signature Non-empty signature present
multi_witness N agents confirm completion Unique attesting witness count >= threshold

Surge pricing

  • Standard: 5% base fee
  • Urgent: +15% (total 20%)
  • Critical: +40% (total 45%)

Escrow model

  • Locked at task creation (budget held)
  • Released only if ALL criteria pass (or per-milestone for milestone tasks)
  • Frozen on dispute
  • Refunded if deadline expires with no proof
安全使用建议
This package implements a local FastAPI server that simulates an escrow/verification platform: it verifies proofs (GPS, photo-hash counts, timestamps, signatures (only checks non-empty), multi-witness attestations) and keeps tasks and worker reputations in memory. Before installing or running: 1) Understand this is a prototype: 'escrow' is only an in-memory state flag — there is no real payment or wallet integration. Do not rely on it to hold or release real funds. 2) The install metadata includes pip packages (fastapi, uvicorn, pydantic) which is expected, but the registry's install kind 'uv' is ambiguous — confirm the install command the platform will perform. 3) The code reads optional env vars BRIDGE_FEE_RATE, BRIDGE_SURGE_URGENT, and BRIDGE_SURGE_CRITICAL but they are not documented as required; set them only if you want to override defaults. 4) Running the server starts an HTTP API — avoid exposing the port to the public internet without adding authentication and TLS. 5) If you intend to use this for real payments or production escrow, require additional work: add persistent storage, authenticated endpoints, audit logging, and integrate with a payment/escrow provider; and review/strengthen verification mechanisms (photo hash only checks hashes supplied by the client, signature check is only non-empty, GPS/timestamps are client-submitted and may be spoofed). If anything here is unclear, ask the author for: (a) exact install instructions, (b) how real escrow/payment is intended to be connected and what credentials are required, and (c) whether the server is expected to be bound only to localhost and how authentication should be configured.
功能分析
Type: OpenClaw Skill Name: a2h-bridge Version: 2.0.0 The a2h-bridge skill is a functional Agent-to-Human (A2H) verification and escrow platform implementation. It provides a FastAPI-based system for creating tasks with specific verification criteria (GPS, photos, timestamps) and managing a logical escrow state. The code in bridge/app.py and bridge/verifier.py is well-structured and aligns perfectly with the documentation in SKILL.md. No evidence of data exfiltration, malicious execution, or prompt injection was found.
能力标签
cryptocan-make-purchases
能力评估
Purpose & Capability
The skill is an A2H verification/escrow platform in description, and the API endpoints, verification engine, and in-memory task/worker state are present — that part is coherent. However, the package does not integrate with any payment system or external escrow provider: 'escrow' is only an in-memory task field (locked/released/frozen) with no wallet, payment API, or credential requirements. A user expecting real money-holding escrow or blockchain/fiat integrations would be misled.
Instruction Scope
SKILL.md instructs running a local uvicorn server and shows curl examples for the API — this matches the included FastAPI implementation. The runtime instructions do not ask for unrelated files or credentials. Note: running the server will expose an HTTP API on the host; the doc shows binding to --port 8015 but does not warn about network exposure or require authentication.
Install Mechanism
The SKILL.md metadata requests installing Python packages (fastapi, uvicorn, pydantic), which is appropriate for the code. The registry install entry shows a single install spec 'uv' (and the metadata contains an object with id:'pip' and kind:'uv'), which is unusual/ambiguous — it's not a standard URL or well-known release host and may be a packaging artifact. Installing via pip for these packages is expected; clarify the intended install mechanism before running automated installs.
Credentials
Registry metadata declares no required env vars, but bridge/state.py reads BRIDGE_FEE_RATE, BRIDGE_SURGE_URGENT, and BRIDGE_SURGE_CRITICAL from the environment for fee/surge configuration. Those are reasonable optional configuration values, but they are not documented as configurable env vars in the SKILL.md metadata. More importantly: no credentials are requested even though the description implies escrow/payment — if you plan to connect real payments you will need to modify the code and supply payment credentials (which are not currently requested).
Persistence & Privilege
The skill does not request persistent system privileges, does not set always:true, and does not modify other skill/system configs. State is entirely in-memory; there is no file I/O persistence or background service registration beyond running the local server.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install a2h-bridge
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /a2h-bridge 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.0.0
Summary: Major upgrade adding milestone-based tasks, worker reputation, and more verification types. - Added support for milestone-based tasks with partial payment release per milestone. - Introduced worker reputation tracking and worker leaderboard/profile endpoints. - Added new verification type: multi-witness. - Introduced surge pricing (urgent/critical) with higher fees. - Expanded API with new endpoints for task acceptance, milestone verification, and richer queries.
v1.1.0
Version 1.1.0 - Updated bridge/app.py, bridge/models.py, and bridge/state.py. - General improvements and changes to the core task, proof verification, and state management logic.
v1.0.0
Initial public release of a2h-bridge – Agent-to-Human verification and escrow platform. - Provides API endpoints to create tasks with location, photo, timestamp, and signature-based verification. - Supports secure escrow: funds are locked on task creation and only released when all formal criteria are met. - Enables human proof submission and automatic or criteria-based verification. - Supports disputes: funds are frozen and verification is paused during dispute resolution. - Includes endpoints for task management, platform info, and statistics. - Installable with Python and FastAPI stack; simple server startup instructions included.
元数据
Slug a2h-bridge
版本 2.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 3
常见问题

Bridge 是什么?

Agent-to-Human (A2H) verification and escrow platform. Request physical-world tasks, define verification criteria (GPS, photos, timestamps, signatures, multi... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 91 次。

如何安装 Bridge?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install a2h-bridge」即可一键安装,无需额外配置。

Bridge 是免费的吗?

是的,Bridge 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Bridge 支持哪些平台?

Bridge 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Bridge?

由 mirni(@mirni)开发并维护,当前版本 v2.0.0。

💬 留言讨论