← 返回 Skills 市场
anlinxi

Oc Call

作者 anlinxi · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
78
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install oc-call
功能描述
通过 OpenClaw Gateway HTTP API 调用远程 OpenClaw 实例,支持多轮会话保持。 当用户说"用 oc 回答"、"用 openclaw 回答"、"oc 回答"、或发送 /oc 命令时触发。 用于调用内网另一台机器(192.168.123.106)上的 OpenClaw 进行问答,保持会...
安全使用建议
This skill implements exactly what it says — it will POST user queries to an OpenClaw Gateway on the internal IP 192.168.123.106 and persist a session key in ~/.oc_session — but it contains hard-coded URL and token values and its documentation claims environment-variable overrides that the code does not actually use. Before installing or running: (1) review and, if needed, remove or replace the hard-coded OC_TOKEN and OC_URL in scripts/oc_call.py; (2) if you expect to supply credentials via environment variables, update the script so it actually reads them (or ensure they are removed from the repo); (3) consider whether calling an internal IP from an agent is acceptable in your environment; (4) be aware the skill writes ~/.oc_session (protect that file or change its path); (5) if you do not trust the embedded token/IP, do not install or run the skill. If the author can provide a corrected version that reads OC_URL and OC_TOKEN from env vars (and removes hard-coded secrets), the concerns here would be largely resolved.
能力评估
Purpose & Capability
Name/description match the code: the script calls an OpenClaw Gateway at an IP on the LAN and keeps a session key. However the SKILL.md suggests sensitive values should be supplied via environment variables, yet the shipped Python code uses hard-coded defaults (OC_URL and OC_TOKEN) and does not read environment variables. The registry metadata also declares no required env vars, so the documentation, code, and registry are inconsistent.
Instruction Scope
Instructions and the script stay within the stated purpose: they only POST to the OpenClaw /v1/chat/completions endpoint and read/write a single session file (~/.oc_session). There is no sign the skill reads other user files or exfiltrates data to unexpected endpoints. Still, it will make network calls to an internal IP (192.168.123.106) which may be surprising if the user did not expect internal network access.
Install Mechanism
This is an instruction-only skill with a single included Python script and no install spec — low install risk because nothing is downloaded or executed automatically beyond the script itself.
Credentials
The skill embeds a default OC_TOKEN ('87654321') and OC_URL (http://192.168.123.106:28789/...) in the code rather than declaring required environment variables in the registry or actually reading overrides. Hard-coded credentials in a shipped skill are a red flag. The skill also writes a session file to ~/.oc_session; that is reasonable for session persistence but is additional local state to consider.
Persistence & Privilege
The skill does not request permanent platform-wide presence (always:false) and does not modify other skills. It writes its own session file to the user's home directory, which is expected behavior for session persistence but could leak session keys if the file is not properly protected.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install oc-call
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /oc-call 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
Fix: add safe_print() to handle Windows console encoding (GBK can't encode emoji)
v1.0.0
Initial release
元数据
Slug oc-call
版本 1.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Oc Call 是什么?

通过 OpenClaw Gateway HTTP API 调用远程 OpenClaw 实例,支持多轮会话保持。 当用户说"用 oc 回答"、"用 openclaw 回答"、"oc 回答"、或发送 /oc 命令时触发。 用于调用内网另一台机器(192.168.123.106)上的 OpenClaw 进行问答,保持会... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 78 次。

如何安装 Oc Call?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install oc-call」即可一键安装,无需额外配置。

Oc Call 是免费的吗?

是的,Oc Call 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Oc Call 支持哪些平台?

Oc Call 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Oc Call?

由 anlinxi(@anlinxi)开发并维护,当前版本 v1.0.1。

💬 留言讨论