← 返回 Skills 市场

DualAgentSolver

Name: DualAgentSolver
Author: tvaloki

作者 tvaloki · GitHub ↗ · v0.1.0

cross-platform ⚠ suspicious

266

总下载

当前安装

版本数

在 OpenClaw 中安装

/install dual-agent-solver

功能描述

Run a two-agent collaborative problem-solving workflow where one agent is your OpenClaw agent (primary solver) and a second agent challenges assumptions, sur...

使用说明 (SKILL.md)

DualAgentSolver

Use this when the user wants two agents to work a problem and converge on a practical solution.

Setup

export OPENBRAIN_MCP_URL="http://127.0.0.1:54321/mcp"
# optional
export OPENBRAIN_MCP_TOKEN="..."

Optional second-agent model via OpenAI API (if key exists):

export OPENAI_API_KEY="..."
export SOLVER_SECOND_MODEL="gpt-4o-mini"

If OPENAI_API_KEY is missing, the second agent also runs through openclaw agent.

Run

python3 skills/dual-agent-solver/scripts/dual_agent_solver.py \
  --query "How should we migrate our cron jobs safely?" \
  --rounds 3

Output

Returns JSON including:

round-by-round solver + critic outputs
final merged solution
memory write result and key (dual-agent-solver:\x3Ctimestamp>)

Storage

Persists outcome into public.memories (creates table if missing).

安全使用建议

What to check before installing/using this skill: - Review and trust the MCP endpoint: the script sends your query, pulled context, and final solution to OPENBRAIN_MCP_URL and uses tools exposed by that MCP. If you set OPENBRAIN_MCP_URL to anything other than a trusted localhost instance, you may be transmitting sensitive data off-host. - OpenAI usage is optional but explicit: if you set OPENAI_API_KEY the script will call api.openai.com and send prompt content; only provide that key if you accept that. The skill does not redact sensitive data before sending. - Verify the 'openclaw' binary: the script runs subprocess 'openclaw agent'. Ensure that binary is present, trusted, and behaves as you expect. The skill metadata did not declare this required binary — treat that as a documentation gap. - Memory persistence: the skill creates/inserts into public.memories. If you are concerned about long-term storage of queries/results, do not run it or modify the code to avoid the write. - Inspect the included script before running: there is no installer, so review scripts/dual_agent_solver.py to confirm it matches your risk tolerance and to change behavior (e.g., disable memory writes, force localhost MCP, or remove OpenAI calls). - If you want to proceed: run the script in a sandboxed environment first (with OPENBRAIN_MCP_URL pointed to a local/test MCP) and without OPENAI_API_KEY to observe behavior. Add explicit required env var/binary declarations in your deployment policy or avoid giving it network access if you do not trust remote endpoints.

功能分析

Type: OpenClaw Skill Name: dual-agent-solver Version: 0.1.0 The dual-agent-solver skill implements a legitimate multi-round collaborative problem-solving workflow between the OpenClaw agent and a second agent (either OpenClaw or OpenAI). The script (dual_agent_solver.py) uses standard libraries to interact with the OpenClaw CLI via subprocess and external APIs via urllib, and it includes a robust custom SQL escaping mechanism (dollar-quoting) to safely persist results into a PostgreSQL database. No evidence of data exfiltration, shell injection, or malicious intent was found; the code's behavior is entirely consistent with its stated purpose.

能力评估

⚠ Purpose & Capability

The skill's goal (run two agents, produce a merged solution, and store it in Open Brain memory) matches what the code does. However the package metadata declares no required binaries or env vars while the runtime uses the 'openclaw' CLI and several environment variables (OPENBRAIN_MCP_URL, OPENBRAIN_MCP_TOKEN, OPENAI_API_KEY). The missing declarations are an incoherence that reduces transparency.

⚠ Instruction Scope

SKILL.md and the script instruct the agent to: call an MCP endpoint (OPENBRAIN_MCP_URL) to run tools (search_docs, execute_sql), optionally call the external OpenAI API, run the local 'openclaw agent' binary, and persist results into public.memories. Those actions go beyond purely local reasoning: they transmit user query/context to external endpoints (MCP and optionally api.openai.com) and write persistent memory. This is within the skill's functional scope but has potential privacy/exfiltration implications and should be explicitly documented and trusted.

✓ Install Mechanism

No install spec (instruction-only + code file) — nothing is downloaded or installed automatically. This minimizes install-time risk. The included Python script will run on invocation; review it before executing.

⚠ Credentials

The script uses several environment variables (OPENBRAIN_MCP_URL, OPENBRAIN_MCP_TOKEN, OPENAI_API_KEY, SOLVER_SECOND_MODEL, OPENBRAIN_SQL_TOOL, OPENBRAIN_CONTEXT_TOOL) but the skill metadata lists none. Requesting an MCP URL/token and an OpenAI key is plausible for its behavior, but the metadata omission is misleading. Especially important: if OPENBRAIN_MCP_URL is pointed at a remote or untrusted endpoint, the skill will send queries, context, and the final outcome to that endpoint and will write memory there via SQL tool calls.

ℹ Persistence & Privilege

The skill intentionally writes results into public.memories (creates table if missing and inserts outcome). That persistent write is consistent with the stated behavior (stores solution into Open Brain memory). It does not request 'always: true'. Still, persistence means private or sensitive query data will be stored; confirm you want that data kept and where (the MCP-backed data store).

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install dual-agent-solver
安装完成后，直接呼叫该 Skill 的名称或使用 /dual-agent-solver 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.1.0

Two-agent collaborative solver with OpenClaw as primary agent and memory persistence

元数据

Slug dual-agent-solver

版本 0.1.0

许可证 —

累计安装 1

当前安装数 1

历史版本数 1

常见问题