← 返回 Skills 市场
Mova Contract Discovery
作者
Sergii Miasoiedov
· GitHub ↗
· v1.0.1
· MIT-0
99
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install mova-contract-discovery
功能描述
Browse, search, and run public MOVA contracts from the community marketplace. Trigger when the user asks to find a contract, discover available contracts, se...
安全使用建议
Before installing or enabling this skill: (1) Confirm that the 'openclaw-mova' plugin (or equivalent provider of the mova_* tools) is actually required and available in your agent environment — the SKILL.md states this requirement but the skill metadata does not declare it. (2) Ask how authentication and org-scoped permissions are handled when running contracts — who supplies the org credentials, connectors, and consent, and where are tokens stored? The skill's ability to 'run contracts on behalf of the user's org' should map to a documented auth flow. (3) Verify that the platform enforces the skill's own rule to confirm with the user before any run (don't rely solely on prose in SKILL.md). (4) If you plan to run contracts, start with non-production/test contracts and review audit logs and connector scopes. (5) If the publisher or source is unknown, treat this as higher risk until you can confirm the dependency and auth model — the mismatch between declared metadata and SKILL.md raises uncertainty about how and with what privileges the skill will act.
功能分析
Type: OpenClaw Skill
Name: mova-contract-discovery
Version: 1.0.1
The skill bundle provides a standard interface for searching and executing workflows (contracts) within the MOVA ecosystem using the openclaw-mova plugin. It follows safe interaction patterns, such as requiring user confirmation before execution and explicitly handling human-in-the-loop (HITL) gates, with no evidence of data exfiltration, obfuscation, or malicious instructions in SKILL.md.
能力评估
Purpose & Capability
The SKILL.md explicitly says this is an 'Ecosystem Skill' that "Requires the `openclaw-mova` plugin" and describes operations that run public contracts on behalf of the user's org. However, the skill metadata declares no dependencies, no required binaries, and no required environment variables or credentials. Running contracts and listing connectors plausibly requires platform/plugin-level auth or connectors; the omission of any declared dependency or credential is an incoherence.
Instruction Scope
The runtime instructions are narrowly scoped to: search (mova_discover_contracts), inspect, run (mova_run_contract), handle HITL (mova_hitl_decide), and check run status. They do not instruct reading unrelated files or exfiltrating data. They do rely entirely on external tools provided by the `openclaw-mova` plugin (tool calls are explicit).
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing will be written to disk by an installer. That's the lowest-risk installation model.
Credentials
The skill claims the ability to run contracts 'on behalf of the user's org' and references checking 'the contract's required connectors', but it declares zero environment variables, credentials, or config paths. Either the platform or the missing 'openclaw-mova' plugin must supply auth, but the skill metadata does not document this. The absence of declared credentials/config for an action that normally requires auth is disproportionate/unexplained.
Persistence & Privilege
always:false (default) and there is no install/persistence. The skill can be invoked autonomously by the agent (disable-model-invocation:false) which is the platform default; combined with the credential/permission gaps noted above this increases the importance of verifying how auth is enforced, but the skill itself does not request elevated persistence.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mova-contract-discovery - 安装完成后，直接呼叫该 Skill 的名称或使用
/mova-contract-discovery触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Added Ecosystem Skill type label.
v1.0.0
Initial release — browse and run public MOVA contracts from the community marketplace.
元数据
常见问题
Mova Contract Discovery 是什么？
Browse, search, and run public MOVA contracts from the community marketplace. Trigger when the user asks to find a contract, discover available contracts, se... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 99 次。
如何安装 Mova Contract Discovery？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mova-contract-discovery」即可一键安装，无需额外配置。
Mova Contract Discovery 是免费的吗？
是的，Mova Contract Discovery 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Mova Contract Discovery 支持哪些平台？
Mova Contract Discovery 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Mova Contract Discovery？
由 Sergii Miasoiedov（@mova-compact）开发并维护，当前版本 v1.0.1。
推荐 Skills