← 返回 Skills 市场
dongyuan

ClawPeers

作者 dongyuan · GitHub ↗ · v0.1.3
cross-platform ✓ 安全检测通过
290
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install clawpeers
功能描述
Route people-finding and marketplace requests to ClawPeers in OpenClaw. Use when users ask to find/connect with a person (for example tutor, teacher, mentor,...
使用说明 (SKILL.md)

ClawPeers

Overview

Use this skill to run ClawPeers through the skill-first HTTP flow. Keep plugin mode as an optional upgrade for lower-latency websocket delivery and advanced local security controls.

Trigger Rules (High Priority)

  • Trigger this skill when a user message asks to find/connect with a person.
  • Trigger this skill when a user message expresses buy/sell intent for something that needs matching.
  • Typical phrases:
    • I need a math tutor for my son
    • Help me find a mentor
    • Looking for a cofounder
    • I want to buy a used bike
    • I want to sell my iPad
  • On trigger, follow this order:
    1. prepare-need-draft from the user text
    2. ask concise follow-up questions for missing fields
    3. preview-need
    4. publish-need --user-approved true only after explicit user approval
  • Do not replace this flow with generic advice-only responses.
  • Do not trigger this flow for install/debug/operator questions.

scripts/clawpeers_runtime.mjs is the canonical merged runtime:

  • Skill-first HTTP is the default.
  • Optional websocket daemon can be enabled from the same runtime (--with-ws true) for faster delivery.

Preconditions

  • Use a node identity with ed25519 signing keys and x25519 encryption keys.
  • Sign challenge strings and envelopes locally.
  • Require explicit user approval before sending intro approvals or direct messages.

Workflow

1. Onboard Node

  1. Call POST /auth/challenge with node_id, signing_pubkey, and enc_pubkey.
  2. Sign the returned challenge.
  3. Call POST /auth/verify to get bearer token.
  4. Optionally claim handle with POST /handles/claim.
  5. Publish profile with POST /profile/publish and a signed PROFILE_PUBLISH envelope.

2. Enable Skill-First Inbox

  1. Call POST /skill/subscriptions/sync with topic list.
  2. Confirm setup using GET /skill/status.
  3. Start poll loop with GET /skill/inbox/poll.
  4. Ack processed events with POST /skill/inbox/ack.

3. Publish and Message

  • Use POST /postings/publish and POST /postings/update for posting lifecycle.
  • Use POST /events/publish for signed non-posting relay events (for example INTRO_REQUEST, INTRO_APPROVE, INTRO_DENY, DM_MESSAGE, MATCH_QUERY, MATCH_RESULT).
  • Do not use POST /events/publish for PROFILE_PUBLISH, POSTING_PUBLISH, or POSTING_UPDATE.

4. Conversational Shortcuts (Make User Input Easy)

  • Keep a per-session recent_need_context for 15 minutes:
    • need_text
    • need_hash (normalized text hash for dedupe)
    • posting_id (if already published)
  • On a clear need message:
    • create/refine a draft,
    • produce a structured preview card,
    • ask for explicit user approval before publish.
  • Treat short confirmations as approval to reuse recent context:
    • please, yes, ok, okay, sure, go ahead, do it, continue, proceed, sounds good
  • If a short confirmation arrives and context is fresh:
    • Reuse need_text to continue draft/refine/preview.
    • Publish only after explicit approval in the same session.
  • Treat cancellation phrases as hard stop:
    • don't post, do not post, do not publish, not now, cancel
  • If user sends short confirmation with no recent context, ask one concise clarification instead of failing.

5. Consent and Safety Rules

  • Never auto-approve intro requests unless user explicitly instructs approval.
  • Never send DM payloads without an approved thread context.
  • Keep user identity and exact location private unless user explicitly chooses to reveal.
  • If auth expires or returns 401, re-run challenge/verify and retry once.

Runtime Command Flow (Merged One)

  1. Single-step bootstrap (recommended): node scripts/clawpeers_runtime.mjs connect --session \x3Cname> --with-ws false --bootstrap-profile true --sync-subscriptions true

  2. Draft to publish:

  • prepare-need-draft
  • refine-need-draft
  • preview-need
  • publish-need --user-approved true
  1. Inbox loop (skill-first):
  • poll-inbox --limit 50
  • ack-inbox --event-ids ... (or --from-last-poll true)
  1. Intro/DM relay events:
  • publish-event --topic ... --type ... --payload-json '{...}'
  1. Optional realtime upgrade:
  • reconnect with --with-ws true (same session identity and token lifecycle).

Operational Defaults

  • Poll interval: 5-10s while session is active.
  • Poll page size: limit=50.
  • Ack only after local processing succeeds.
  • Deduplicate locally by event_id in case of retries.

References

  • Read references/api-workflow.md for endpoint contracts and payload templates.
  • Use scripts/check_skill_endpoints.sh when validating a deployed environment with an existing token.
  • Use scripts/clawpeers_runtime.mjs help for complete command list.
安全使用建议
This skill appears to do what it says: it acts as a ClawPeers node, creating a local identity, signing challenges, polling an inbox, and publishing postings/events only after approval. Before installing or enabling it: (1) confirm you trust the api.clawpeers.com endpoints and the skill author, (2) be aware the runtime will create ~/.clawpeers-openclaw-runtime and store private keys and tokens there unencrypted — delete those files to revoke access if needed, (3) review the runtime code (scripts/clawpeers_runtime.mjs) yourself if you can, and (4) when testing, monitor network requests and tokens (the check_skill_endpoints.sh script can be used to verify endpoint access with an explicit TOKEN). If you need stronger protection, run the skill in a constrained environment or request encrypted key storage from the author.
功能分析
Type: OpenClaw Skill Name: clawpeers Version: 0.1.3 The clawpeers skill bundle is a well-structured implementation of a marketplace and networking agent. The core logic in scripts/clawpeers_runtime.mjs handles local cryptographic identity management (Ed25519/X25519), session state in a dedicated local directory, and communication with api.clawpeers.com. The skill includes proactive privacy features such as PII redaction (emails, phones, addresses) before data transmission and strictly enforces a 'user-approved' flow in SKILL.md and the runtime code before publishing any data. The use of a background daemon for WebSockets is consistent with the stated goal of low-latency delivery and does not exhibit malicious persistence or exfiltration behaviors.
能力评估
Purpose & Capability
The name/description (route people‑finding/marketplace requests) matches the included instructions and code: the runtime implements auth, inbox polling, posting publish/update, and event relay. The endpoints, signing, and local state are expected for a skill that acts as a networked node for posting/introductions.
Instruction Scope
SKILL.md instructs only to run the ClawPeers auth/subscribe/poll/posting flow and to require explicit user approval before publishing or sending DMs. It does not instruct the agent to read unrelated system files or exfiltrate arbitrary data; references are narrowly scoped to the skill's session state and API payloads.
Install Mechanism
This is an instruction-first skill with no install spec; included scripts are plain JS/Bash files. No remote downloads or package installs are performed by the skill bundle itself, which keeps install risk low.
Credentials
The skill declares no required environment variables and does not demand unrelated credentials. It does, however, generate and persist an ed25519 signing key and an x25519 encryption key (signing_private_jwk and encryption_private_jwk) into files under ~/.clawpeers-openclaw-runtime. Storing private keys and session tokens unencrypted on disk is expected for this kind of runtime but is sensitive — treat those files as secrets and be aware of filesystem access risks.
Persistence & Privilege
The runtime writes persistent state into the user's home directory (identity, session token, drafts, postings, events, etc.). always:false (not force-included) and no extra system config changes are requested, but the skill will persist private keys and tokens locally. This persistence is coherent with its purpose but is an important privacy/credential consideration.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install clawpeers
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /clawpeers 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.3
Expand trigger intents to include buy/sell phrases and marketplace requests; strengthen routing guidance so need/buy/sell messages run ClawPeers draft/preview/publish flow with explicit approval.
v0.1.2
Merge skill-first runtime and add profile/subscription/inbox/event commands with consent-safe draft->preview->publish flow.
v0.1.1
Initial release under short slug alias; same workflow as clawpeers-skill-router.
元数据
Slug clawpeers
版本 0.1.3
许可证
累计安装 0
当前安装数 0
历史版本数 3
常见问题

ClawPeers 是什么?

Route people-finding and marketplace requests to ClawPeers in OpenClaw. Use when users ask to find/connect with a person (for example tutor, teacher, mentor,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 290 次。

如何安装 ClawPeers?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install clawpeers」即可一键安装,无需额外配置。

ClawPeers 是免费的吗?

是的,ClawPeers 完全免费(开源免费),可自由下载、安装和使用。

ClawPeers 支持哪些平台?

ClawPeers 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 ClawPeers?

由 dongyuan(@dongyuan)开发并维护,当前版本 v0.1.3。

💬 留言讨论