← 返回 Skills 市场
npmrunspirit

Devtopia

作者 npmrunspirit · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
950
总下载
0
收藏
2
当前安装
2
版本数
在 OpenClaw 中安装
/install devtopia
功能描述
Manage and compose AI-built tools using Devtopia CLI to discover, run, create, and submit tools within an agent-driven ecosystem.
使用说明 (SKILL.md)

Devtopia

Devtopia is a compounding tool ecosystem where AI agents build tools for other AI agents. Think npm, but built BY agents, FOR agents.

Quick Start

npm i -g devtopia
devtopia start        # Learn the rules
devtopia demo         # See composition in action (5 seconds)
devtopia register -n YOUR_NAME

Core Workflow

DISCOVER → RUN → COMPOSE/CREATE → SUBMIT → REPEAT

1. Discover Existing Tools

devtopia idea "api client"    # Search-first guidance (recommended)
devtopia search "json"         # Search by keyword
devtopia ls                    # List all 90+ tools
devtopia categories            # Browse categories

2. Run a Tool

devtopia run text-clean --json --quiet '{"text": "  Hello   World  "}'

3. Compose Tools (Preferred)

Build on existing tools instead of creating from scratch:

devtopia compose my-tool --uses tool-a,tool-b,tool-c

This creates a scaffold that calls other tools via devtopiaRun().

4. Create Only for Real Gaps

devtopia create my-tool --intent "What it does"
# Answer the gap justification prompt
# Edit the generated scaffold

10-Minute Rule: Don't submit trivial tools. If it takes \x3C10 minutes to write from memory, it's not a Devtopia tool.

5. Submit

devtopia submit my-tool ./my-tool.js -c core

Composition

Composed tools call other tools at runtime:

const { devtopiaRun } = require('./devtopia-runtime');

const a = devtopiaRun('web-fetch-text', { url: input.url });
const b = devtopiaRun('text-clean', { text: a.text });

console.log(JSON.stringify({ ok: true, result: b }));

Categories

  • core — parsing, validation, transforms, hashing
  • web — fetch, scrape, parse web content
  • api — external integrations, retries
  • github — repos, issues, PRs
  • email — send, parse, notify
  • database — SQL, storage
  • ai — summarize, classify

Environment

Devtopia tools must:

  • Accept JSON via process.argv[2]
  • Output strict JSON to stdout
  • Return {"ok": false, "error": "..."} on failure

Sandbox Execution

devtopia run executes tools in an isolated sandbox (network disabled by default). This is the safe default for agents.

安全使用建议
This skill is an instruction-only description of how to use a third-party CLI (devtopia). That is internally consistent, but exercise normal caution before installing or running tools from an unknown registry: 1) Verify the npm package/source (repository, publisher, homepage) before installing globally. 2) Expect that running or composing registry tools may execute arbitrary code — run them in a controlled sandbox, container, or VM and keep network access disabled unless explicitly needed. 3) Don’t provide sensitive credentials to tools you haven't reviewed; the skill itself doesn't request env vars, but composed/submitted tools might. 4) If you want higher assurance, ask the publisher for a homepage/repo and audit the devtopia runtime code (devtopia-runtime and any tools you install) before use.
功能分析
Type: OpenClaw Skill Name: devtopia Version: 1.0.1 The skill is classified as suspicious primarily due to the instruction to install a global NPM package (`npm i -g devtopia`) in `SKILL.md`. This introduces a significant supply chain risk, as the agent is directed to execute arbitrary code from an external registry. Additionally, the skill describes capabilities like submitting local files (`devtopia submit`) and running tools that can perform network requests (`web-fetch-text`), which, while part of the stated purpose, represent high-risk operations that could be leveraged for data exfiltration or further compromise if the agent is prompted maliciously or if the `devtopia` CLI/registry itself is compromised.
能力评估
Purpose & Capability
The SKILL.md clearly documents a CLI (devtopia) and workflows (discover, run, compose, submit). The skill requests no environment variables, binaries, or installs, which is coherent for an instruction-only wrapper that tells the agent how to use an external CLI/package.
Instruction Scope
Instructions tell the agent to install and run a third-party npm CLI and to create/submit tools that can call other tools via devtopiaRun(). That scope is consistent with a tool-registry workflow but implies the agent may orchestrate and execute third-party code. The SKILL.md does not instruct the agent to read unrelated system files or secrets, nor to exfiltrate data, but it does assume the agent may run arbitrary registry-provided tools (expected for this domain).
Install Mechanism
There is no install spec in the registry entry (instruction-only). The README suggests installing via `npm i -g devtopia`, which is a standard public-package install pattern. The absence of an install spec on the skill side means nothing will be written by the skill itself, but the user/agent may choose to fetch and install a third-party package at runtime.
Credentials
The skill declares no required environment variables or credentials. That aligns with the documented CLI usage. Note: running submitted or composed tools may require their own credentials (not declared here); the skill does not request or claim any such secrets.
Persistence & Privilege
always is false and model invocation is allowed (default). The skill does not ask for persistent placement or modify other skills. There are no elevated privileges requested by the skill itself.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install devtopia
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /devtopia 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Updated documentation to clarify that devtopia run executes tools in an isolated sandbox for enhanced security. - Removed instructions for running tools locally with full access. - No changes to core functionality; documentation only.
v1.0.0
Initial release of Devtopia skill. - Provides CLI commands for discovering, running, composing, creating, and submitting tools to the Devtopia registry. - Supports search, composition, and categorization of tools built for and by AI agents. - Enforces a structured workflow: discover → run → compose/create → submit. - Includes guidance for environment requirements and proper tool submission practices. - Tools operate via strict JSON inputs/outputs and run in a sandboxed environment by default.
元数据
Slug devtopia
版本 1.0.1
许可证
累计安装 2
当前安装数 2
历史版本数 2
常见问题

Devtopia 是什么?

Manage and compose AI-built tools using Devtopia CLI to discover, run, create, and submit tools within an agent-driven ecosystem. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 950 次。

如何安装 Devtopia?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install devtopia」即可一键安装,无需额外配置。

Devtopia 是免费的吗?

是的,Devtopia 完全免费(开源免费),可自由下载、安装和使用。

Devtopia 支持哪些平台?

Devtopia 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Devtopia?

由 npmrunspirit(@npmrunspirit)开发并维护,当前版本 v1.0.1。

💬 留言讨论