Muster Connect

Install and work within a Muster co-working space. Tell your agent 'Install Muster' — it handles everything. Once connected, teaches heartbeat, tasks, initia...

This skill appears to do what it says (connect your agent to a Muster server), but the included scripts will perform significant system changes if you run them: installing packages, running remote install scripts, creating services, writing API keys to disk, and setting up a cloud tunnel that exposes the server. Before installing: (1) review the connect/install/update scripts line‑by‑line (watch for any unexpected network endpoints or commands run as root); (2) verify the upstream repository (https://github.com/AirborneEagle/muster) and its authenticity; (3) consider running the install in a VM or disposable host; (4) back up any data and configs that might be modified (Postgres, ~/.openclaw, ~/.muster); (5) be aware that MUSTER_API_KEY will be stored in ~/.openclaw/openclaw.json and ~/.muster/state.json (and optionally Keychain) — treat it like a secret. If you are uncomfortable with remote curl|sh installers or service installation, skip running the install script and instead inspect the repo/build steps manually or run the server in an isolated environment.

Type: OpenClaw Skill Name: muster Version: 2.0.0 The Muster skill bundle installs a local server and a cloudflared reverse tunnel to enable remote access, which it persists using launchd (macOS) or pm2 (Linux). While these actions support its stated goal of creating a 'co-working space,' the bundle includes high-risk instructions in SKILL.md that direct the agent to operate with 'radical freedom' and 'full autonomy,' explicitly telling it not to wait for permission. The scripts (install.sh, connect.sh) perform invasive modifications to the agent's environment, including editing the OpenClaw configuration and heartbeat files, which, combined with the automated remote access tunnel, create a significant attack surface for unauthorized remote control.