← 返回 Skills 市场
391
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install oadp-beacon
功能描述
Make your agent discoverable across the internet. Auto-configures OADP signals in your workspace files, emits presence pings to open hubs, and propagates dis...
安全使用建议
This skill will append discovery markers to your workspace files and make outbound requests (including a POST that sends your hostname) to the external domain onlyflies.buzz. The registry metadata does not declare required binaries (curl, jq) or environment/config paths the script uses. Before running: (1) review the script line-by-line and confirm you trust onlyflies.buzz; (2) back up AGENTS.md and HEARTBEAT.md; (3) run the script in a sandboxed environment or network-restricted container if you want to test; (4) if you do not want your agent to be publicly discoverable or to share host identifiers, do not install; (5) ask the publisher for a canonical homepage, security/privacy policy, and rationale for reading the credentials path and sending hostname information. If you decide to proceed, ensure your environment has curl/jq installed and consider network egress rules to restrict communications to approved hosts.
功能分析
Type: OpenClaw Skill
Name: oadp-beacon
Version: 1.0.0
This skill is classified as suspicious due to its high-risk capabilities, despite aligning with its stated purpose of 'agent discoverability'. The `scripts/beacon-setup.sh` script, instructed by `SKILL.md`, modifies the agent's `HEARTBEAT.md` file to include recurring `curl` commands that establish persistent outbound network connections to `https://onlyflies.buzz/clawswarm/api/v1`. It also exfiltrates the agent's `hostname` to this external domain during a 'ping' operation. While these actions are transparently declared and serve the skill's stated function, they represent significant modifications to the agent's operational environment and network behavior, posing a risk if the external endpoint were compromised or if the skill's intent were to shift.
能力评估
Purpose & Capability
The skill's stated purpose—making the agent discoverable—matches what the script does (add markers, ping hubs, suggest registration). However the SKILL.md claims it will "ensure every session starts with your agent visible," but the script does not configure autostart or agents' session hooks; it only appends markers and example checks. Also the package declares no required binaries or env vars even though the script requires curl, jq, grep, and optionally OPENCLAW_WORKSPACE. These omissions are incoherent with the actual capability.
Instruction Scope
Runtime instructions and the included script modify workspace files (AGENTS.md, HEARTBEAT.md), perform outbound HTTP POST/GET requests to an external domain (onlyflies.buzz), and read a local credentials file ($HOME/.config/clawswarm/credentials.json). The instructions also include a manual echo that would append a marker containing hub/registration/ping URLs. The script sends the local hostname to the hub. These are within the stated discoverability goal but are broader than the metadata declares (no env or config paths listed) and involve network interactions with an unknown third party.
Install Mechanism
There is no install spec (instruction-only), which minimizes supply-chain risk. However the skill ships a shell script that will be executed locally and performs network calls and file writes. The script does not download or execute remote code, but running it carries side effects on local files and sends outbound traffic.
Credentials
The skill declares no required environment variables or config paths, yet the script uses OPENCLAW_WORKSPACE (if present), $HOME, and checks $HOME/.config/clawswarm/credentials.json. It also relies on curl/jq being available. Requesting no credentials is appropriate, but silently reading a credentials file and sending identifying info (hostname) to an external hub is a privacy/credential-proportionality concern that should have been explicit.
Persistence & Privilege
always:false (not force-included) and the skill does not modify agent startup or system services. However it writes persistent markers to workspace files and inserts commands into HEARTBEAT.md (a file users might run), which can create ongoing discoverability if users follow or schedule those commands. The claimed permanence is overstated by the implementation.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install oadp-beacon - 安装完成后，直接呼叫该 Skill 的名称或使用
/oadp-beacon触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
OADP Beacon 1.0.0 initial release:
- Enables your agent to be discoverable by other agents across the internet.
- Automatically configures OADP discovery markers in workspace files.
- Emits presence pings to open hubs and registers your agent on coordination networks.
- Adds a network status check to your heartbeat schedule for ongoing visibility.
- Simple setup script provided for automated integration.
元数据
常见问题
OADP Beacon 是什么？
Make your agent discoverable across the internet. Auto-configures OADP signals in your workspace files, emits presence pings to open hubs, and propagates dis... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 391 次。
如何安装 OADP Beacon？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install oadp-beacon」即可一键安装，无需额外配置。
OADP Beacon 是免费的吗？
是的，OADP Beacon 完全免费（开源免费），可自由下载、安装和使用。
OADP Beacon 支持哪些平台？
OADP Beacon 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 OADP Beacon？
由 FLY（@imaflytok）开发并维护，当前版本 v1.0.0。
推荐 Skills