← 返回 Skills 市场

Agency HQ

Name: Agency HQ
Author: spockthegreatbot

作者 spockthegreatbot · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

311

总下载

当前安装

版本数

在 OpenClaw 中安装

/install agency-hq

功能描述

A pixel art office visualization for your AI agent team. Shows real-time agent status, activity feeds, and personality-driven banter. Works with OpenClaw in...

使用说明 (SKILL.md)

Agency HQ — AI Agent Office

A real-time pixel art visualization of your AI agent team. Agents move between rooms (office, kitchen, game room, server room) based on their actual status. Includes a live activity feed, agent spotlight cards, and personality-driven chat.

When to Use

You want a visual dashboard showing what your agents are doing
You want to showcase your agent team to others (demo mode)
You want a fun, always-on display of your OpenClaw setup

Setup

1. Clone and Install

git clone https://github.com/enjinstudio/agency-hq.git
cd agency-hq
npm install

2. Configure Mode

Copy .env.example to .env.local:

cp .env.example .env.local

Set ARENA_MODE=live to connect to your OpenClaw instance, or leave as demo for simulated data.

3. Customize Your Agents

Edit src/lib/agents.ts. Each agent needs:

Field	Description
`id`	Must match your OpenClaw agent ID (e.g., `main`, `dev`, `research`)
`name`	Display name
`emoji`	Avatar emoji
`role`	Role label shown in spotlight
`model`	Model name shown in spotlight
`color`	Hex color for theme and pixel art
`desk`	Desk position: `command`, `dev`, `trading`, `research`, `design`, `security`, `content`, `strategy`, `engineering`, `pm`, `finance`
`accessory`	Pixel art accessory: `glasses`, `hat`, `badge`, `headphones`, `scarf`, `cap`, `bowtie`, `visor`, `antenna`, `crown`, `monocle`

4. Customize Chat Lines (Optional)

Edit src/lib/agent-chat.ts to write personality-driven banter. Each agent has:

general — random lines said to the room
to{AgentName} — directed lines at specific agents (30% chance)

5. Run

# Development
npm run dev

# Production
npm run build && npm start

6. Deploy to Vercel (Optional)

Push to GitHub and import in Vercel. Demo mode activates automatically on Vercel.

How Live Mode Works

In live mode, the app reads from your OpenClaw directory:

Agent status — scans ~/.openclaw/agents/{id}/sessions/*.jsonl for recent activity
Activity feed — extracts user messages and tool calls from session files
System stats — reads /proc/loadavg, runs free -m and df
Room assignment — active agents → office, idle → kitchen/game room, offline → rest room

No database. No external APIs. Just reads files from disk.

Requirements

Node.js 20+
OpenClaw (for live mode only)
npm

Notes

The chat system generates fun flavor text — it's not real agent communication
Demo mode works everywhere, including Vercel, with zero configuration
The pixel art renderer uses Canvas2D — no WebGL required, works in all browsers
Mobile responsive — stacks vertically on small screens

安全使用建议

This project is a legitimate dashboard but it will read and serve local OpenClaw session files (user messages, tool calls) and basic system metrics. Before running or deploying: - Treat live mode as sensitive: only run ARENA_MODE=live on a machine you control and that is not publicly accessible. If you deploy to a public host (e.g., Vercel) keep ARENA_MODE=demo. - Inspect ~/.openclaw/agents/*/sessions/*.jsonl to understand what data will be displayed; these files can contain user content you may not want exposed. - If you must expose the app publicly, add access controls (auth) or remove/obfuscate the activity endpoints. - Note the code runs shell commands (ps, free, df, uptime). These are read-only but execSync is used — avoid inserting untrusted agent IDs into AGENTS (agent.id ends up interpolated into a shell pipeline in isAgentRunning), and prefer simple ASCII alphanumeric ids to avoid accidental shell interpretation. - If you want to run locally but minimize data shown, run in demo mode, or modify the extract logic to redact or omit user messages. Given the potential to surface private session content, proceed with caution — the code appears honest about what it does, but its live mode can leak sensitive data if misconfigured.

功能分析

Type: OpenClaw Skill Name: agency-hq Version: 1.0.0 The skill bundle implements a monitoring dashboard that uses `execSync` to run shell commands for system statistics and process checking in `src/app/api/agents/stats/route.ts` and `src/app/api/agents/status/route.ts`. A potential shell injection vulnerability exists in the `isAgentRunning` function because it interpolates `agentId` directly into a shell command; since the documentation encourages users to customize these IDs in `src/lib/agents.ts`, this presents a risk of command injection. Additionally, the application requires broad read access to the user's `~/.openclaw` directory. While these capabilities are aligned with the stated purpose, they represent a high-risk attack surface without clear evidence of intentional malice.

能力评估

ℹ Purpose & Capability

The name/description (pixel-art dashboard for agent teams) matches the code: the app renders a pixel office and provides activity/status/stats endpoints. The code legitimately reads OpenClaw session files and system stats to populate the UI, which is expected for a live-monitoring dashboard. Note: surfacing session 'user' messages and tool calls is part of the feature (activity feed) but is sensitive data.

⚠ Instruction Scope

SKILL.md and code explicitly instruct reading ~/.openclaw/agents/{id}/sessions/*.jsonl and cron runs, parsing their JSONL contents, and including user messages in the activity feed; they also read /proc/loadavg and run shell commands (free, df, uptime, ps). That scope is coherent for local live mode, but it means private conversation content and system info will be served by the app's API routes. The README/SKILL.md suggests deploying to Vercel for demo mode — if live mode is enabled (or OPENCLAW_HOME present) on a hosted/public instance this could leak sensitive session data to visitors.

✓ Install Mechanism

No remote download/install spec in the skill registry (instruction-only install). The repository contains normal Node/Next.js source and package.json; nothing is being pulled from unusual or opaque URLs by the skill metadata. Risk mostly comes from running the app, not from how it installs.

ℹ Credentials

Registry metadata lists no required env vars, but the app code and README rely on HOME and OPENCLAW_HOME to locate session files. Those env vars are reasonable for a local tool, but the skill requests no credential secrets. There's no external API key or unrelated credential requested. Still: environment values (HOME/OPENCLAW_HOME) are used to access local files, which is central to the feature.

✓ Persistence & Privilege

The skill is not force-included (always:false) and does not claim to change other skills or system configuration. It runs server-side endpoints and uses child_process.execSync for a few read-only commands (uptime, free, df, ps) — normal for a local status dashboard. No persistent system-wide modifications are present.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install agency-hq
安装完成后，直接呼叫该 Skill 的名称或使用 /agency-hq 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release — pixel art AI agent office with live OpenClaw integration and demo mode

元数据

Slug agency-hq

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题

Agency HQ 是什么？

A pixel art office visualization for your AI agent team. Shows real-time agent status, activity feeds, and personality-driven banter. Works with OpenClaw in... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 311 次。

如何安装 Agency HQ？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install agency-hq」即可一键安装，无需额外配置。

Agency HQ 是免费的吗？

是的，Agency HQ 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

Agency HQ 支持哪些平台？

Agency HQ 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Agency HQ？

由 spockthegreatbot（@spockthegreatbot）开发并维护，当前版本 v1.0.0。