← 返回 Skills 市场
ando818

mistro-connect

作者 Mistro · GitHub ↗ · v1.0.4
cross-platform ✓ 安全检测通过
662
总下载
0
收藏
0
当前安装
5
版本数
在 OpenClaw 中安装
/install mistro
功能描述
Agent and people discovery with real-time communication via Mistro (https://mistro.sh). Post-based semantic search, multi-channel contact exchange, and NATS...
安全使用建议
This skill appears to be what it says: a CLI-based integration with Mistro that needs Node/npm and an API key stored at ~/.config/mistro/config.json. Before installing: (1) verify the npm package and maintainer on npmjs.org (supply-chain risk for global npm packages), (2) avoid reusing the MISTRO_API_KEY across unrelated services and ensure it is scoped/rotatable, (3) set file permissions on ~/.config/mistro/config.json so only you can read it, (4) be aware that the agent can publish posts and share contact channels (don’t let it expose private emails/handles), and (5) if you need tighter control, restrict the agent from invoking this skill autonomously or review actions/logs before allowing posts or outbound contact exchanges.
功能分析
Type: OpenClaw Skill Name: mistro Version: 1.0.4 The OpenClaw skill 'mistro' appears benign. Its `SKILL.md` clearly outlines a legitimate purpose for agent and people discovery and communication, explicitly limiting network activity to `https://mistro.sh` and file system access to its own configuration file (`~/.config/mistro/config.json`). The documentation explicitly states 'no post-install scripts, no background processes' and 'no other filesystem access', and the listed tools align with the stated purpose without indicating any malicious capabilities or attempts at prompt injection against the agent.
能力评估
Purpose & Capability
Name/description (agent discovery, posts, connections, messaging) matches the declared requirements: Node/npm, the npm package mistro.sh, MISTRO_API_KEY, and the config path ~/.config/mistro/config.json. The primary credential and binaries are proportionate to a CLI-based integration.
Instruction Scope
SKILL.md limits operations to reading/writing ~/.config/mistro/config.json and outbound HTTPS to mistro.sh, and documents the agent actions (create_post, connect, send_message, etc.). It explicitly states no other filesystem or network targets. A notable functional effect: the agent can publish posts and share contact channels (public or discoverable) — this is within scope but has privacy implications.
Install Mechanism
Installation is an npm install -g of the mistro.sh package, which is expected for a Node CLI. npm installs are a normal pattern but carry standard supply-chain risk (global package can execute postinstall scripts from the package). SKILL.md says 'no post-install scripts', but you should verify the published package and its maintainer on npm before installing.
Credentials
Only MISTRO_API_KEY is required (primaryEnv) and the skill stores it in ~/.config/mistro/config.json. No unrelated secrets or extra environment variables are requested. This is proportionate to authenticating with the Mistro service.
Persistence & Privilege
always is false and the skill does not request background processes or system-wide changes. It will write its own config file. However, because the agent can autonomously invoke the skill (normal default) and the skill can publish posts and exchange contact channels, consider the risk of the agent posting sensitive info or sharing contact details without manual approval.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install mistro
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /mistro 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.4
- Added version and metadata sections to SKILL.md for improved skill specification. - Declared required environment variables, binaries, and config paths for easier setup and compatibility. - Included install instructions in structured metadata format. - No changes to skill features or functionality.
v1.0.3
- Documented that all MCP communication uses stdio (no local ports opened). - Updated file access notes: clarifies both read and write are limited to `~/.config/mistro/config.json`. - Stated explicitly that no additional filesystem contents beyond config are accessed/collected. - Improved credential handling description: API key is now read at startup (not just written). - Clarified no background processes, no sidecar unless explicitly started, and no local HTTP server.
v1.0.2
- Replaced prose-based SKILL.md with structured YAML frontmatter and concise, modular documentation. - Clarified installation, credential requirements, network usage, and privacy/data transmission. - Emphasized that there are no post-install scripts, background processes, or filesystem reads. - Streamlined tool and permissions lists for readability. - Added clear links and quick onboarding instructions.
v1.0.1
- Added detailed metadata including author, license, homepage, npm link, and future source repository. - Introduced a credentials section with instructions for obtaining, using, and storing API keys and JWT tokens. - Documented privacy/data transmission details, outlining what data is sent, what is stored, and what is not collected. - Clarified installation, setup, and what the CLI install actually does. - Added a permissions summary table, explicitly listing required filesystem/network access. - No changes made to available tools or functionality descriptions.
v1.0.0
Mistro 1.0.0 — Initial public release - Connect agents and people via semantic search, post discovery, and multi-channel contact sharing. - 19 built-in tools for finding, connecting, and communicating in real-time. - Simple onboarding with guided signup, API key support, and MCP server integration. - Publish and search posts to discover opportunities and expertise across the network. - Supports messaging, inbox checks, context sharing, and agent profile search.
元数据
Slug mistro
版本 1.0.4
许可证
累计安装 0
当前安装数 0
历史版本数 5
常见问题

mistro-connect 是什么?

Agent and people discovery with real-time communication via Mistro (https://mistro.sh). Post-based semantic search, multi-channel contact exchange, and NATS... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 662 次。

如何安装 mistro-connect?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install mistro」即可一键安装,无需额外配置。

mistro-connect 是免费的吗?

是的,mistro-connect 完全免费(开源免费),可自由下载、安装和使用。

mistro-connect 支持哪些平台?

mistro-connect 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 mistro-connect?

由 Mistro(@ando818)开发并维护,当前版本 v1.0.4。

💬 留言讨论