← 返回 Skills 市场
🔌

ACT Runtime

作者 ACT Core · GitHub ↗ · v0.1.0 · MIT-0
cross-platform ⚠ suspicious
98
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install act-cli
功能描述
Run ACT WebAssembly component tools via `act call`. Use when the user asks to use an ACT component, run a .wasm tool, or needs sandboxed tools (SQLite, HTTP,...
使用说明 (SKILL.md)

ACT Tools

Run self-contained WebAssembly component tools via the act CLI. No system dependencies, no Docker, no language runtimes — just .wasm binaries in a sandbox.

Prerequisites

Check if act is available:

act --help

If not installed:

npm i -g @actcore/act

Step 1: Discover tools

act info --tools --format json \x3Ccomponent>

\x3Ccomponent> is one of:

  • OCI registry ref: ghcr.io/actpkg/sqlite:0.1.0
  • HTTP URL: https://example.com/component.wasm
  • Local file: ./component.wasm

The output contains:

  • metadata_schema — required configuration keys (pass via --metadata)
  • tools — list of tool names, descriptions, and parameters_schema

Use --format text for a human-readable summary instead of JSON.

Step 2: Call a tool

act call \x3Ccomponent> \x3Ctool-name> --args '\x3Cjson>' [options]
Option Purpose
--args '\x3Cjson>' Tool parameters (matches parameters_schema)
--metadata '\x3Cjson>' Component config (matches metadata_schema)
--allow-dir guest:host Grant directory access to the sandbox
--allow-fs Grant full filesystem access

Output is JSON on stdout. Logs go to stderr.

Remote components are cached locally after first download.

Example: SQLite

# Create a table
act call ghcr.io/actpkg/sqlite:0.1.0 execute-batch \
  --args '{"sql":"CREATE TABLE notes (id INTEGER PRIMARY KEY, text TEXT, created_at TEXT DEFAULT CURRENT_TIMESTAMP)"}' \
  --metadata '{"database_path":"/data/notes.db"}' \
  --allow-dir /data:/tmp/act-data

# Insert
act call ghcr.io/actpkg/sqlite:0.1.0 execute \
  --args '{"sql":"INSERT INTO notes (text) VALUES (?1)","params":["Hello from ACT"]}' \
  --metadata '{"database_path":"/data/notes.db"}' \
  --allow-dir /data:/tmp/act-data

# Query
act call ghcr.io/actpkg/sqlite:0.1.0 query \
  --args '{"sql":"SELECT * FROM notes"}' \
  --metadata '{"database_path":"/data/notes.db"}' \
  --allow-dir /data:/tmp/act-data

Important

  • Always run act info --tools first to discover tool names and schemas
  • Pass --metadata on every call (stateless — no session)
  • Use --allow-dir guest:host only when the component needs filesystem access
  • Components run sandboxed in WebAssembly — no host access unless explicitly granted
安全使用建议
This skill appears coherent for running ACT WebAssembly components. Before installing or using it: (1) Only install the act CLI from an official source (verify the npm package and publisher). (2) When calling remote or third-party components (ghcr.io, HTTP, or unknown .wasm files), inspect their metadata/schemas and avoid granting --allow-fs or broad --allow-dir unless you trust the component. (3) Remember remote components are cached locally — remove cached artifacts if you no longer trust them. (4) Treat running untrusted .wasm components like running any third-party code: least privilege, review inputs/outputs, and avoid exposing sensitive host directories.
功能分析
Type: OpenClaw Skill Name: act-cli Version: 0.1.0 The skill facilitates the global installation of a third-party CLI tool (`@actcore/act`) and provides instructions for downloading and executing remote WebAssembly components from OCI registries (ghcr.io/actpkg/) or arbitrary URLs. Most significantly, SKILL.md explicitly instructs the agent on how to bypass WASM sandboxing by granting components full filesystem access (`--allow-fs`) or directory mapping (`--allow-dir`), which poses a high risk of host compromise if the agent is directed to execute an untrusted component. Additionally, the _meta.json contains a suspicious future-dated timestamp (year 2026).
能力评估
Purpose & Capability
The skill's name/description match the SKILL.md: it requires the act CLI and instructs the agent to run act info and act call against .wasm components or OCI refs. No unrelated binaries, credentials, or config paths are requested.
Instruction Scope
Instructions stay within purpose (discover tools, call tools, pass metadata, allow directories). Important operational decisions (e.g., --allow-dir, --allow-fs) can grant components filesystem access; the SKILL.md calls this out and advises caution. No instructions ask the agent to read unrelated host files, environment variables, or exfiltrate data.
Install Mechanism
There is no registry install spec; the SKILL.md recommends installing the act CLI via npm (npm i -g @actcore/act). Installing a global npm package is a normal way to get the required binary but does carry the usual supply-chain/registry risks of any npm package. The recommendation uses a package name (not an arbitrary download URL), which is proportionate for this tool.
Credentials
The skill requests no environment variables or credentials. The primary potential privilege is filesystem/network access that the operator may grant to components at runtime (via --allow-dir/--allow-fs), which is appropriate for a sandboxed runtime but should be granted selectively.
Persistence & Privilege
The skill is instruction-only, has always: false, and does not request persistent privileges or modify other skills. Autonomous invocation is allowed by default but not excessive here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install act-cli
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /act-cli 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial release of the act-cli skill: - Run sandboxed WebAssembly tools via the `act` CLI with zero system dependencies. - Supports discovering tool names, descriptions, and parameter schemas from ACT components (.wasm files, OCI registries, or URLs). - Allows safe, parameterized tool execution with JSON input/output. - Includes guidance for directory/filesystem sandboxing and metadata requirements. - Example provided for running SQLite in a sandboxed ACT environment.
元数据
Slug act-cli
版本 0.1.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

ACT Runtime 是什么?

Run ACT WebAssembly component tools via `act call`. Use when the user asks to use an ACT component, run a .wasm tool, or needs sandboxed tools (SQLite, HTTP,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 98 次。

如何安装 ACT Runtime?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install act-cli」即可一键安装,无需额外配置。

ACT Runtime 是免费的吗?

是的,ACT Runtime 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

ACT Runtime 支持哪些平台?

ACT Runtime 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 ACT Runtime?

由 ACT Core(@actcore)开发并维护,当前版本 v0.1.0。

💬 留言讨论