← 返回 Skills 市场

clawhub-skill-remote-agent

Name: clawhub-skill-remote-agent
Author: sqsge

作者 sqsge · GitHub ↗ · v1.0.1

cross-platform ⚠ suspicious

1135

总下载

当前安装

版本数

在 OpenClaw 中安装

/install clawhub-skill-remote-agent

功能描述

Bridge to external vertical agents (Google ADK, VeADK, etc.) for specialized tasks.

使用说明 (SKILL.md)

Remote Agent Bridge

This skill enables OpenClaw to delegate tasks to external, specialized AI agents via a standard HTTP interface. Use this when the user's request requires domain-specific knowledge (e.g., enterprise data, financial analysis, legal review) that is handled by a separate agent system.

Configuration

Ensure the following environment variables are set in your OpenClaw environment (e.g., via .env or openclaw config):

REMOTE_AGENT_URL: The HTTP endpoint of the external agent (e.g., https://remote-agent.example.com/run or your Google ADK endpoint).
REMOTE_AGENT_KEY: (Optional) The Bearer token for authentication.

Usage

When the user asks a question that falls into the domain of a specialized remote agent, use this skill to forward the request.

Command

python3 skills/remote-agent/scripts/client.py --query "\x3CUSER_QUERY>" [--agent "\x3CAGENT_ID>"]

Examples

Scenario 1: Financial Analysis (VeADK)

User: "Analyze the Q3 earnings report for TechCorp." Thought: The user is asking for financial analysis. I should delegate this to the 'financial-expert' agent. Action:

python3 skills/remote-agent/scripts/client.py --agent "financial-expert" --query "Analyze the Q3 earnings report for TechCorp"

Scenario 2: Enterprise Knowledge (Google ADK)

User: "What is the company policy on remote work?" Thought: This requires internal knowledge. I'll ask the 'hr-bot'. Action:

python3 skills/remote-agent/scripts/client.py --agent "hr-bot" --query "company policy on remote work"

Scenario 3: Custom LangChain Backend

User: "Run the data processing pipeline." Action:

python3 skills/remote-agent/scripts/client.py --query "Run the data processing pipeline"

安全使用建议

This skill performs network forwarding of user queries to an external HTTP endpoint. Before installing, verify the following: 1) Confirm the REMOTE_AGENT_URL points to a trusted, well-managed endpoint and that you control or trust the operator. 2) Review the included scripts/client.py source to see exactly what data it sends (conversation history, system env, files) and how it authenticates. 3) Prefer making the skill user-invocable and/or set disableModelInvocation:true so the model cannot call it autonomously. 4) If you must allow it, restrict the REMOTE_AGENT_URL and REMOTE_AGENT_KEY to minimal-scoped credentials, require HTTPS, and add allowlisting in the script so only explicitly authorized fields are transmitted. 5) Resolve the metadata mismatch (registry vs SKILL.md) or ask the publisher for clarification. If you cannot review or trust the endpoint and script, do not install.

功能分析

Type: OpenClaw Skill Name: clawhub-skill-remote-agent Version: 1.0.1 The skill's primary purpose is to bridge to a user-defined remote agent, which involves network communication. The `scripts/client.py` file includes an `--insecure` argument that explicitly disables SSL verification (`ctx.check_hostname = False`, `ctx.verify_mode = ssl.CERT_NONE`). While this flag is opt-in and includes a warning in the code and output, it represents a risky capability that could lead to insecure data transmission if misused, making the skill suspicious rather than benign. There is no evidence of intentional malicious behavior like data exfiltration of local sensitive files or arbitrary local command execution.

能力评估

ℹ Purpose & Capability

The skill's name/description (bridge to external vertical agents) match the SKILL.md instructions to forward queries to a REMOTE_AGENT_URL. However the registry metadata shown earlier listed no required env vars while SKILL.md's metadata declares REMOTE_AGENT_URL (and the prose documents REMOTE_AGENT_KEY). This mismatch is an incoherence in declared requirements.

⚠ Instruction Scope

The SKILL.md instructs the agent to run scripts/client.py to forward user queries to an arbitrary REMOTE_AGENT_URL. The instructions do not clearly limit what conversation context or system data may be included, nor do they require explicit user approval before sending potentially sensitive data. That open-ended forwarding of user requests (and any attached context) to an external HTTP endpoint is a high-risk action.

ℹ Install Mechanism

There is no install spec (instruction-only), which lowers risk of silent binary installs. However a Python script (scripts/client.py) is included and intended to be executed — the runtime behavior of that script (network targets, headers, additional env reads, file reads) is unknown because its contents were not reviewed here, so execution risk remains.

⚠ Credentials

SKILL.md requires REMOTE_AGENT_URL and optionally REMOTE_AGENT_KEY (Bearer token). Those are proportionate to contacting a remote agent, but the top-level registry listed no required envs — an inconsistency. More importantly, providing a bearer token and an unrestricted endpoint means sensitive data could be forwarded off-platform; the skill does not justify or limit what it will send.

⚠ Persistence & Privilege

The skill does not set always:true (good) but also does not set disableModelInvocation or user-invocable flags, which means the model may autonomously choose to invoke this skill. That allows the agent to call out to external endpoints without an explicit user request, increasing the chance of unintended data transmission.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install clawhub-skill-remote-agent
安装完成后，直接呼叫该 Skill 的名称或使用 /clawhub-skill-remote-agent 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

- Updated example configuration to use a generic endpoint (`https://remote-agent.example.com/run`) instead of a specific provider. - No other visible changes or enhancements.

v1.0.0

Initial release – provides a bridge to external, specialized AI agents via HTTP. - Enables task delegation from OpenClaw to domain-specific remote agents (e.g., Google ADK, VeADK) - Requires configuration of remote agent URL and optional authentication token - Includes command-line interface for forwarding user queries to selected agents - Supports a variety of use cases such as financial analysis, HR queries, and custom backend actions

元数据

Slug clawhub-skill-remote-agent

版本 1.0.1

许可证 —

累计安装 1

当前安装数 1

历史版本数 2

常见问题