← 返回 Skills 市场

Agent Intelligence

Name: Agent Intelligence
Author: mackding

作者 Blossom · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

122

总下载

当前安装

版本数

在 OpenClaw 中安装

/install agent-intelligence

功能描述

Research-backed intelligence database covering AI coding tools' hidden features, model codenames, feature flags, and version changes.

使用说明 (SKILL.md)

Agent Intelligence

You are the Claws-Shield Agent Intelligence engine — a research-backed database covering the hidden internals of AI coding tools.

What You Do

Query the intelligence database for:

Model Codenames — Map internal codenames (Capybara, Tengu, Fennec, Numbat) to actual models
Feature Flags — Look up 250+ documented feature flags with decoded purposes
Hidden Features — Discover unreleased tools and capabilities behind feature gates
Version Diffs — Compare behavioral changes between AI tool versions
User Tier Analysis — Document internal vs external user treatment differences

How to Use

npx @claws-shield/cli intel "capybara codename"
npx @claws-shield/cli intel "tengu feature flags"
npx @claws-shield/cli intel "unreleased tools"

Or programmatically:

node scripts/query-intel.mjs "\x3Cquery>"

Data Sources

Deep reverse engineering analysis of Claude Code v2.1.88 (512K lines)
5 unique research documents covering telemetry, features, undercover mode, killswitches, and roadmap
Community contributions
Automated scanning of new releases

Knowledge Base

The intelligence database is structured as JSON datasets:

telemetry/endpoints.json — Known telemetry endpoints
flags/feature-flags.json — 250+ feature flags with decoded purposes
codenames/models.json — Model codename registry
hidden-features/unreleased-tools.json — 17+ unreleased tools
remote-control/managed-settings.json — Remote control infrastructure

安全使用建议

Proceed with caution. This skill claims to catalogue telemetry endpoints, remote-control settings, feature flags, and unreleased tools—data that could be sensitive or enabling of misuse. Before installing or invoking: 1) Ask the author for provenance, citations, and the raw dataset files (the SKILL.md lists datasets but they are not bundled). 2) Verify the npm packages referenced (@claws-shield/cli, @claws-shield/intel, @claws-shield/core) in a safe environment: inspect their source repository, release signatures, and maintainers. 3) Avoid running npx or node scripts that will fetch remote packages on a production machine—use an isolated sandbox or VM. 4) If you need this functionality, prefer a version that bundles the data or uses a documented, auditable remote API with clear provenance and access controls. 5) If you cannot obtain trustworthy provenance and a bundled dataset, treat this skill as potentially risky and do not run it with real credentials or on critical systems.

能力评估

⚠ Purpose & Capability

The skill's stated purpose is an intelligence DB containing telemetry endpoints, remote-control settings, feature flags, and unreleased tools. However, the package does not include the claimed JSON datasets in the file manifest, and the single helper script imports @claws-shield packages that are not declared or bundled. The skill therefore claims access to potentially sensitive data but doesn't provide those data files or document how they will be obtained, which is incoherent and concerning.

ℹ Instruction Scope

SKILL.md instructs using npx @claws-shield/cli or node scripts/query-intel.mjs to query the KB. The instructions themselves are narrowly scoped to searching a knowledge base and do not explicitly instruct reading unrelated system files or exfiltrating secrets. However, allowed-tools include Bash/Read/Grep (which permit file reads), and the content claims knowledge of telemetry endpoints and remote-control infrastructure — datasets that could be abused if accurate. The instructions give broad freedom to run npx (which performs network fetches) but do not document where the underlying data come from.

⚠ Install Mechanism

There is no install spec even though the SKILL.md and scripts reference an npm CLI (@claws-shield/cli) and modules (@claws-shield/intel, @claws-shield/core). That means using the skill as documented will cause agent/ user to run npx or otherwise fetch packages at runtime from an external registry. The absence of a declared dependency list or trusted release host is an incoherence and increases risk because arbitrary code could be pulled during invocation.

⚠ Credentials

The skill requests no environment variables or credentials, which on the surface is good. But the claimed content (telemetry endpoints, remote-control managed-settings, undercover mode, killswitches) is highly sensitive. The skill's metadata provides no provenance, citations, or included data files; an attacker-controlled or low-quality data source could expose harmful endpoints. The lack of provenance and missing data bundling makes it hard to justify trusting this skill with sensitive operational use.

✓ Persistence & Privilege

The skill does not request always:true, does not declare system-wide config changes, and is user-invocable. There is no explicit persistent privilege or automatic inclusion. This aspect is proportionate.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install agent-intelligence
安装完成后，直接呼叫该 Skill 的名称或使用 /agent-intelligence 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Agent Intelligence 1.0.0 - Initial release of Agent Intelligence research database for AI coding tools. - Query internal model codenames, feature flags, unreleased features, version changes, and user tier differences. - Backed by reverse engineering, unique research documents, and automated release scanning. - Offers both CLI and programmatic interfaces for intelligence lookups. - Knowledge base organized into structured JSON datasets (telemetry, flags, codenames, features).

元数据

Slug agent-intelligence

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题