← 返回 Skills 市场

Agent Optimizer by Drakon Systems

Name: Agent Optimizer by Drakon Systems
Author: jarvis-drakon

作者 jarvis-drakon · GitHub ↗ · v0.8.1 · MIT-0

cross-platform ⚠ suspicious

总下载

当前安装

版本数

在 OpenClaw 中安装

/install drakon-agent-optimizer

功能描述

CLI tool that audits OpenClaw config files for misconfigurations, token waste, security issues, and stale auth. Reads local JSON config files only. No data l...

使用说明 (SKILL.md)

Agent Optimizer by Drakon Systems

Audit, optimize, and secure OpenClaw AI agent deployments.

70+ checks across 15 auditor modules. Free to install and run.

What It Reads (and doesn't)

Reads (local files only):

~/.openclaw/openclaw.json — model config, heartbeat, compaction, plugins
~/.openclaw/agents/*/agent/auth-profiles.json — token expiry checks (does NOT extract or transmit keys)
~/.openclaw/agents/*/agent/models.json — legacy override detection
Workspace skills/, hooks/, extensions/ — pattern-matched for billing/injection/obfuscation signatures

Does NOT:

Send any data off-machine (no telemetry, no analytics)
Store or prompt for API keys, SSH keys, or provider credentials
Modify any files unless --fix or optimize is run with a license (creates backup first)
Make network calls during audit/scan (only activate and update touch the network)

Fleet SSH Audit

The fleet --hosts command runs cat ~/.openclaw/openclaw.json over SSH on each listed host using your existing ~/.ssh/config entries. It does not store, copy, or prompt for SSH keys. Requires Fleet or Lifetime license.

Quick Start

npm install -g @drakon-systems/agent-optimizer
agent-optimizer audit          # Free — 70+ checks
agent-optimizer scan           # Free — malware + billing scan
agent-optimizer optimize --dry-run  # Free — preview optimizations

Auditor Modules (15)

Model Config, Auth Profiles, Cost Estimator, Token Efficiency, Cache Efficiency, Bootstrap Files, Security Scanner, Plugins, Legacy Overrides, Tool Permissions, Provider Failover, Channel Security, Memory Search, Local Models, Security Advisories.

Pricing

Tier	Price	Key Features
Free	£0	Full audit, first 3 fix instructions, scan, preview
Solo	£29	All fixes unlocked, auto-fix, optimize profiles
Fleet	£79	SSH fleet audit, per-host comparison
Lifetime	£149	Everything + 12mo updates + priority support

Purchase: drakonsystems.com/products/agent-optimizer

安全使用建议

This skill appears internally consistent, but it installs a third-party npm CLI and performs local scans (including optional SSH-based fleet reads). Before installing: 1) verify the npm package and GitHub/homepage URLs and publisher identity; 2) review the package code or its crate on a test VM if you cannot fully trust it; 3) be aware fleet mode will use your ~/.ssh keys to read remote OpenClaw files (ensure you intend that); 4) run in dry-run/audit mode first and inspect the generated snapshots and the locally stored license (~/.agent-optimizer/) to confirm behavior. If you need higher assurance, request the package source code or a signed release and audit it before running it against production configurations.

功能分析

Type: OpenClaw Skill Name: drakon-agent-optimizer Version: 0.8.1 The skill bundle describes a CLI tool (@drakon-systems/agent-optimizer) that requires high-privilege access, including global NPM installation, reading sensitive OpenClaw configuration files (auth-profiles.json), and performing remote command execution via SSH for 'fleet audits.' While these capabilities are aligned with its stated purpose as a security and optimization auditor, the combination of remote execution, access to ~/.ssh/config, and external network calls for license activation (drakonsystems.com) presents a significant security risk if the underlying package is compromised or misused by the agent.

能力标签

cryptocan-make-purchasesrequires-sensitive-credentials

能力评估

✓ Purpose & Capability

The name/description (OpenClaw config audit, token/security checks, optional fleet audit) aligns with the declared requirements: node>=20 and a global npm install of @drakon-systems/agent-optimizer. Requested config paths (openclaw JSON files, workspace skills/hooks/extensions) are appropriate for this purpose.

ℹ Instruction Scope

SKILL.md instructs the tool to read local config files and scan workspace code and mentions a fleet mode that runs 'cat ~/.openclaw/openclaw.json' via SSH using the user's ~/.ssh/config/keys. This is consistent with an audit tool, but scanning workspace/skills/hooks may access other sensitive files (tokens, credentials) — the skill claims not to transmit data, which is plausible but relies on the external npm package behaving as documented.

ℹ Install Mechanism

No local code included; install is 'npm install -g @drakon-systems/agent-optimizer' from the npm registry. This is a typical delivery for a CLI but does mean arbitrary third-party code will be installed at runtime — moderate-risk compared to instruction-only skills. The package and homepage URLs are declared; verify they match the publisher before installing.

ℹ Credentials

The skill requests no environment variables or credentials. It legitimately reads ~/.ssh/config and uses existing SSH keys for fleet audits and scans local config paths that may contain tokens. Access to those files is proportionate to an audit tool, but they are sensitive — the user should confirm the package will not exfiltrate data (the SKILL.md states a one-time license activation and npm update check only).

✓ Persistence & Privilege

always:false (default) and no special persistence or system-wide configuration changes are requested. License and snapshots are stored under ~/.agent-optimizer; auto-invocation privileges are normal for skills and not elevated here.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install drakon-agent-optimizer
安装完成后，直接呼叫该 Skill 的名称或使用 /drakon-agent-optimizer 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.8.1

Fix ClawHub scanner flags: declare config paths, credential policy, network calls, data handling, fleet SSH mechanism. No code changes.

v0.8.0

Initial ClawHub publish. 70+ checks, 15 auditor modules, cyberpunk CLI, security advisories, memory search, local model tuning.

元数据

Slug drakon-agent-optimizer

版本 0.8.1

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 2

常见问题