← 返回 Skills 市场
socneo

message-hub-socneo

作者 socneo · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
199
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install message-hub-socneo
功能描述
Message Hub - AI Team Message Hub Client for async collaboration
安全使用建议
This package appears to be a straightforward client for a Message Hub, but be cautious: the registry metadata does not declare the environment variables the code actually needs. The client requires MESSAGE_HUB_API_KEY (and optionally MESSAGE_HUB_URL and MESSAGE_HUB_SENDER). Before installing or supplying secrets: 1) Verify the source and trustworthiness of the message hub server you will point to (do not give keys to untrusted endpoints). 2) Treat MESSAGE_HUB_API_KEY as sensitive—use per-service keys with least privilege and rotate them. 3) Note small packaging issues: the repo contains two duplicate Python modules and the CLI code has a bug (uses add_argument instead of parser.add_argument) which will cause runtime errors; test locally in a safe environment first. 4) If you need assurance, ask the publisher for corrected registry metadata, a canonical single module, and an explanation of why files are duplicated and why required env vars were omitted.
功能分析
Type: OpenClaw Skill Name: message-hub-socneo Version: 1.0.0 The skill bundle provides a standard Python client for an AI team message hub, facilitating asynchronous communication between agents. The code (hub_client.py and message_hub.py) implements basic REST API interactions with HMAC-based message signing for integrity and environment-variable-based configuration for security. While there is a minor syntax error in the CLI argument parsing (missing 'parser.' prefix), there is no evidence of malicious intent, data exfiltration, or prompt injection.
能力评估
Purpose & Capability
The code implements a Message Hub client (push/pull/broadcast/health/stats) consistent with the name/description. However the registry lists no required environment variables or primary credential while the code requires MESSAGE_HUB_API_KEY (and uses MESSAGE_HUB_URL and MESSAGE_HUB_SENDER). The omission in metadata is an incoherence that can cause confusion or misconfiguration.
Instruction Scope
SKILL.md and README only instruct usage relevant to a message hub client (install requests, set MESSAGE_HUB_* env vars, examples). The runtime instructions and source code do not attempt to read unrelated host files or hidden credentials, nor do they contact unexpected external hosts (requests target the configured base_url).
Install Mechanism
No install spec is provided (instruction-only install). The README asks to pip install requests which is proportional. Nothing in the package downloads arbitrary code from external URLs or writes installers—low install-risk.
Credentials
The client legitimately needs an API key (MESSAGE_HUB_API_KEY) and optionally MESSAGE_HUB_URL and MESSAGE_HUB_SENDER. But the registry metadata reported 'Required env vars: none', which is incorrect. The code will raise an error if MESSAGE_HUB_API_KEY is not set. Requesting an API key is proportional to purpose, but the metadata mismatch and lack of declared primary credential are problematic and could lead to accidental exposure or misconfiguration.
Persistence & Privilege
The skill does not request persistent/always-on privileges, does not modify other skills or system-wide settings, and does not enable autonomous invocation beyond the platform default. No persistence/privilege escalation observed.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install message-hub-socneo
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /message-hub-socneo 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Message Hub v1.0.0 – Initial Release - Launch of Python client for Tianma Message Hub. - Supports pushing and pulling messages for async AI team collaboration. - Broadcast capability to Feishu group (Tianma only). - Includes message signature verification and automatic retry. - Security audit completed and requirements defined.
元数据
Slug message-hub-socneo
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

message-hub-socneo 是什么?

Message Hub - AI Team Message Hub Client for async collaboration. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 199 次。

如何安装 message-hub-socneo?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install message-hub-socneo」即可一键安装,无需额外配置。

message-hub-socneo 是免费的吗?

是的,message-hub-socneo 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

message-hub-socneo 支持哪些平台?

message-hub-socneo 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 message-hub-socneo?

由 socneo(@socneo)开发并维护,当前版本 v1.0.0。

💬 留言讨论