← 返回 Skills 市场
liuruibin

MaxKB

作者 刘瑞斌 · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
167
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install maxkb
功能描述
查询已发布智能体列表供 LLM 选择,再按指定智能体名称发起对话并返回回答。
安全使用建议
This skill's behavior (querying a MaxKB server, logging in, obtaining access tokens, and opening chat sessions) matches its description, but the registry metadata incorrectly claims no required environment variables while the code requires MAXKB_DOMAIN plus either MAXKB_TOKEN or MAXKB_USERNAME/MAXKB_PASSWORD. Before installing: 1) Only provide credentials for a MaxKB instance you trust; the skill will send user questions to that server. 2) Prefer a scoped/limited token over admin credentials if possible. 3) Run the script in an isolated environment first (or inspect/modify the code) to confirm the endpoints (MAXKB_DOMAIN and any API prefix) and to ensure logs/outputs do not leak secrets. 4) Ask the publisher to correct the registry metadata to list the required env vars and to provide a homepage/source provenance. 5) If you cannot verify the MaxKB instance or the publisher, do not supply real credentials.
功能分析
Type: OpenClaw Skill Name: maxkb Version: 1.0.1 The skill bundle is a legitimate integration for the MaxKB platform, allowing an AI agent to discover and interact with other published agents. The implementation in `scripts/main.py` uses standard Python libraries to handle authentication and Server-Sent Events (SSE) for chat interactions, with all network traffic directed to a user-defined `MAXKB_DOMAIN`. No evidence of data exfiltration, malicious execution, or prompt injection was found.
能力标签
requires-oauth-token
能力评估
Purpose & Capability
The skill's name/description (listing published agents and forwarding a question to a named agent) matches the implementation: the script queries a MaxKB instance and opens chat sessions. However, the registry metadata declares no required environment variables or credentials, while the SKILL.md and scripts clearly require MAXKB_DOMAIN and either MAXKB_TOKEN or MAXKB_USERNAME/MAXKB_PASSWORD (and optionally MAXKB_API_PREFIX and MAXKB_WORKSPACE_ID). The absence of these declarations in the registry is an incoherence and should be clarified.
Instruction Scope
Runtime instructions are focused: run the included Python script which reads a local .env (if present) and environment variables, then makes HTTP(S) calls to the MaxKB domain (login, list applications, obtain access token, create anonymous session, post chat messages). The instructions do not attempt to read unrelated system files or exfiltrate data to third-party endpoints beyond the configured MAXKB_DOMAIN.
Install Mechanism
This is an instruction-only skill with a single Python script; there is no install spec that downloads or executes arbitrary external code. The script embeds a lightweight .env loader to avoid optional dependency on python-dotenv.
Credentials
The script legitimately needs MAXKB_DOMAIN and either a token or username/password to authenticate to the MaxKB instance. Those environment variables are documented in SKILL.md/README but were not declared in the registry's required env list—this mismatch is a material oversight. The set of env vars requested by the script is otherwise proportional to the stated purpose and does not request unrelated cloud credentials.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings, and only reads a .env in its own skill directory. It does not persist credentials beyond using environment variables and runtime HTTP calls.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install maxkb
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /maxkb 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Added .env.example to provide a template for environment variables. - Added .gitignore to specify files to be ignored by version control. - Added README.md for documentation and usage instructions.
v1.0.0
maxkb_agents v1.0.0 initial release: - Provides functions to list available agents and route user questions to the selected agent. - Includes list_agents (returns all agents' names and descriptions) and chat_to_agent (forwards questions to a specified agent and returns the answer). - Outlines recommended usage flow for interaction. - Supports environment variable configuration for API access.
元数据
Slug maxkb
版本 1.0.1
许可证 MIT-0
累计安装 1
当前安装数 0
历史版本数 2
常见问题

MaxKB 是什么?

查询已发布智能体列表供 LLM 选择,再按指定智能体名称发起对话并返回回答。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 167 次。

如何安装 MaxKB?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install maxkb」即可一键安装,无需额外配置。

MaxKB 是免费的吗?

是的,MaxKB 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

MaxKB 支持哪些平台?

MaxKB 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 MaxKB?

由 刘瑞斌(@liuruibin)开发并维护,当前版本 v1.0.1。

💬 留言讨论