← 返回 Skills 市场
deepak-jha-kgp

Lemma

作者 deepak-jha-kgp · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
124
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install lemma
功能描述
Lemma is an AI operating system platform for business teams. Use this as the single entrypoint when designing, provisioning, testing, or improving Lemma pods...
使用说明 (SKILL.md)

Lemma

Use this as the main skill for the Lemma package. This package is organized as one parent skill with domain modules under modules/.

Lemma helps teams build AI-powered operating systems around real business workflows. Each pod combines data, logic, orchestration, and operator experiences in one bounded system.

Required Routing Step

Before implementation, pick the module guide that matches the task and follow it.

  • Platform design and sequencing: modules/lemma-main/GUIDE.md
  • Integrations and operation discovery: modules/lemma-integrations/GUIDE.md
  • Functions and backend patterns: modules/lemma-functions/GUIDE.md
  • Datastore design and seed data: modules/lemma-datastores/GUIDE.md
  • Workflow orchestration: modules/lemma-workflows/GUIDE.md
  • Desk app architecture and implementation: modules/lemma-desks/GUIDE.md
  • Assistant behavior and configuration: modules/lemma-assistants/GUIDE.md
  • Agent design and task execution: modules/lemma-agents/GUIDE.md
  • Workspace execution and troubleshooting: modules/lemma-workspace/GUIDE.md
  • Inline widget work: modules/lemma-widget/GUIDE.md

Cross-Module Convention

Use shared CLI drift notes from: modules/lemma-main/references/known-cli-behavior.md

Build Order Guardrail

For non-trivial end-to-end delivery, follow:

  1. integrations
  2. functions
  3. workflows
  4. desks

Do not start desk action wiring until upstream verification is green.

安全使用建议
This package looks like in-repo product documentation and developer tooling for a Lemma platform, not a small single-purpose helper — treat it as source code you will run. Before installing or executing anything: 1) Inspect the included shell scripts (especially init-artifact.sh and bundle-artifact.sh) to confirm they do only expected, local operations and do not call external URLs you don't trust. 2) Do not paste production LEMMA_TOKEN or other high-privilege credentials into workspace previews or browser localStorage; use a least-privilege, short-lived test token and rotate it afterward. 3) Confirm the required environment variables and their minimum needed scopes — the skill's metadata claims none, but the docs expect many. 4) Run any scripts in an isolated/dev workspace (not on a machine with production secrets) and prefer to dry-run commands or read their contents first. 5) If you need a stronger assurance, provide the full contents of the larger scripts for a deeper review; if those scripts make outbound network calls or upload artifacts, consider the skill suspicious until those calls are audited.
功能分析
Type: OpenClaw Skill Name: lemma Version: 1.0.0 The skill bundle provides a comprehensive framework for an AI agent to design, provision, and manage 'Lemma' pods, which are described as AI-powered business operating systems. It includes shell scripts for scaffolding React/Vite applications (`init-artifact.sh`) and bundling them (`bundle-artifact.sh`), alongside extensive markdown documentation (`GUIDE.md` files) that serves as a structured instruction set for the agent. While the scripts handle sensitive environment variables (e.g., `LEMMA_TOKEN` in `print-browser-auth-setup.sh`) and the agent is guided to use powerful workspace capabilities like shell execution and browser automation, these actions are strictly aligned with the platform's stated purpose of software development and deployment. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found.
能力评估
Purpose & Capability
The skill's name and description match the included module guides and developer workflows, but the repository contains runtime scripts and many guides that assume environment variables (LEMMA_TOKEN, LEMMA_BASE_URL, LEMMA_POD_ID, VITE_LEMMA_* etc.) and browser token injection. The registry metadata claims no required env vars or credentials, which is inconsistent with the guidance in the docs. That mismatch is unexpected and should be justified.
Instruction Scope
SKILL.md routes the agent to many module GUIDE.md files that instruct running CLI commands, starting long-lived shells, curling LEMMA_BASE_URL, injecting auth tokens into browser localStorage, using playwright-cli, and running included shell scripts (e.g., ./modules/lemma-desks/scripts/init-artifact.sh). The instructions therefore reference reading and using workspace env vars and performing network calls — actions outside a strictly read-only documentation skill. The instructions do not declare limits on using tokens or where to send data, and they instruct browser-local token injection which can expose credentials if preview URLs are public.
Install Mechanism
There is no install spec (instruction-only), which is low risk for automatic installs. However, the package includes several shell scripts (notably init-artifact.sh and bundle-artifact.sh). Because the skill bundle contains executable scripts, an agent that follows the guides could run them; the package does not declare what those scripts do in the SKILL.md. Absence of an installation step reduces supply-chain risk, but embedded scripts still deserve inspection before execution.
Credentials
The skill declares no required environment variables or credentials, yet the module guides repeatedly assume the presence of sensitive env vars (LEMMA_TOKEN, LEMMA_BASE_URL, LEMMA_AUTH_URL, LEMMA_POD_ID and VITE_LEMMA_*). The guides also instruct injecting tokens into browser localStorage for testing. Requesting or assuming these secrets without declaring them is disproportionate and opaque — users should confirm which credentials are actually needed and avoid using high-privilege or production tokens for testing.
Persistence & Privilege
Flags show always:false and default autonomous invocation allowed. The skill does not request persistent inclusion or modify other skills. This is normal; no elevated platform privileges are requested in the metadata.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install lemma
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /lemma 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of the lemma skill—an AI operating system platform for business teams. - Provides a single entrypoint for designing, provisioning, testing, and improving Lemma pods, integrations, functions, workflows, and more. - Introduces a modular structure with specific guides for each domain (e.g., integrations, datastores, agents, desks). - Establishes a required routing step: pick the relevant module guide before implementation. - Documents conventions for cross-module work and references shared CLI behavior notes. - Outlines a recommended build sequence for complex workflows to ensure upstream verification before progressing.
元数据
Slug lemma
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Lemma 是什么?

Lemma is an AI operating system platform for business teams. Use this as the single entrypoint when designing, provisioning, testing, or improving Lemma pods... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 124 次。

如何安装 Lemma?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install lemma」即可一键安装,无需额外配置。

Lemma 是免费的吗?

是的,Lemma 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Lemma 支持哪些平台?

Lemma 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Lemma?

由 deepak-jha-kgp(@deepak-jha-kgp)开发并维护,当前版本 v1.0.0。

💬 留言讨论