← 返回 Skills 市场

Capital Equipment Network (CapNetEq)

Name: Capital Equipment Network (CapNetEq)
Author: cesco345

作者 Francesco Piscani · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

335

总下载

当前安装

版本数

在 OpenClaw 中安装

/install capital-equipment

功能描述

Search, book, and manage scientific research equipment across 500+ facilities, track usage, submit service requests, and find collaborators securely.

使用说明 (SKILL.md)

Capital Equipment Platform

Find, book, and manage scientific research equipment through your AI assistant. Search 10,000+ instruments across 500+ core facilities at 200+ institutions.

What This Skill Does

Search Equipment: Find microscopes, spectrometers, sequencers, and more near any location
Check Availability: Real-time booking windows for shared instruments
Book Equipment: Reserve time slots directly through your assistant
Submit Service Requests: Describe your research needs and get quotes from facility providers
Find Collaborators: Discover researchers with expertise in specific techniques or equipment
Track Papers: Find published research linked to specific instruments and methods
Compatibility Check: Verify equipment combinations work for your experimental workflow
Price Intelligence: Fair market values, institutional rates, and depreciation data for equipment purchases
Compliance: Get IP agreement and safety requirements for cross-institutional equipment use

Setup

Capital Equipment supports auto-discovery and secure OAuth 2.1.

Connect the Server: Add the Server-Sent Events (SSE) endpoint to your OpenClaw config:

{
  "mcp": {
    "servers": [
      {
        "name": "capital-equipment",
        "type": "sse",
        "url": "[https://us-central1-capital-equipment-dev.cloudfunctions.net/mcpServer/mcp](https://us-central1-capital-equipment-dev.cloudfunctions.net/mcpServer/mcp)"
      }
    ]
  }
}

安全使用建议

Do not add the SSE endpoint or enable automations until you verify a few things: (1) who operates this skill (official homepage or organization), (2) confirm a production-grade endpoint (not a '...-dev.cloudfunctions.net' URL) and request an explanation of what data the SSE stream will receive and what it may trigger, (3) ask for the OAuth flow details — what client id/secret are required, where tokens are stored, and whether the skill will request scopes beyond booking/searching, (4) ask how notifications are delivered to WhatsApp/Slack/Discord and whether those integrations require additional tokens you must provide, (5) request the full list of agent tools the skill expects (search_equipment, get_pricing, etc.) and proof they exist on your OpenClaw instance, and (6) prefer a verifiable open-source or vendor-provided package/homepage before enabling proactive automations. If you cannot get satisfactory answers or the endpoint remains a dev host, treat this skill as untrusted and avoid enabling it or adding the SSE server entry.

功能分析

Type: OpenClaw Skill Name: capital-equipment Version: 1.0.0 The OpenClaw AgentSkills skill bundle for 'Capital Equipment Platform' appears benign. All prompts in AUTOMATIONS.md instruct the AI agent to use specific, legitimate tools (`search_equipment`, `search_marketplace`, `get_pricing`, `search_papers`) for its stated purpose of managing research equipment. There are no signs of prompt injection attempting to subvert the agent, exfiltrate data, establish persistence, or execute arbitrary commands. The skill connects to an external Google Cloud Function endpoint (`https://us-central1-capital-equipment-dev.cloudfunctions.net/mcpServer/mcp`), which is a standard pattern for skills requiring backend services and does not indicate malicious intent within the skill bundle itself.

能力评估

⚠ Purpose & Capability

The described capabilities (search, book, submit requests, OAuth) logically require an external service and authentication. However the registry metadata declares no required credentials or config paths while SKILL.md explicitly references OAuth 2.1 and instructs adding an SSE endpoint. That mismatch (no declared creds but an OAuth flow implied) and the unknown source/homepage are concerning.

⚠ Instruction Scope

Runtime instructions tell the agent owner to add an external Server-Sent Events endpoint to OpenClaw's config and rely on platform tools (search_equipment, get_pricing, etc.). Automations explicitly instruct the agent to read persistent memory (saved searches, previous scout results) and to proactively send notifications to user channels. The SKILL.md does not limit or detail what data the external SSE server may receive or request, nor how OAuth tokens are obtained or stored.

✓ Install Mechanism

There is no install spec and no code files that would be written to disk. Being instruction-only reduces supply-chain risk because nothing is automatically downloaded or executed locally.

⚠ Credentials

The skill implies the need for OAuth credentials and access to notification channels but the manifest declares no required environment variables or primary credential. The SSE URL provided points to a 'capital-equipment-dev.cloudfunctions.net' domain (a developer/test host), which is unexpected for a production-grade marketplace and raises proportionality/trust concerns.

⚠ Persistence & Privilege

Automations in AUTOMATIONS.md are designed to run periodically (cron/heartbeat) and use OpenClaw persistent memory and notification channels to proactively push updates. The skill also instructs modifying the agent config to add an external SSE server. Persistent/background activity plus an external push endpoint increases the blast radius if the endpoint or the automation prompts are malicious or misconfigured.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install capital-equipment
安装完成后，直接呼叫该 Skill 的名称或使用 /capital-equipment 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of the CapNetEq discovery and booking infrastructure.

元数据

Slug capital-equipment

版本 1.0.0

许可证 —

累计安装 0

当前安装数 0

历史版本数 1

常见问题