← 返回 Skills 市场
🔌

oo

作者 openonion · GitHub ↗ · v0.1.0 · MIT-0
cross-platform ⚠ suspicious
95
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install oo
功能描述
Use when user mentions a ConnectOnion agent address (0x...), asks to connect/delegate to a remote agent, or uses /oo command. Also triggers when user wants t...
安全使用建议
This skill appears to do what it claims (connect to ConnectOnion agents), but it will read your local agent private key(s) from .co and may send signed messages and the tasks you provide to an external relay (wss://oo.openonion.ai) if direct connections fail. Before installing or invoking it: verify the authenticity and trustworthiness of the connectonion package and the oo.openonion.ai relay, back up your .co keys, and avoid sending sensitive prompts through the skill unless you trust that relay. If you need stronger assurance, request the skill author to (1) declare the config paths it reads, (2) explain the relay ownership/trust model, and (3) make the relay URL configurable instead of hard-coded.
功能分析
Type: OpenClaw Skill Name: oo Version: 0.1.0 The skill facilitates agent-to-agent delegation using the ConnectOnion framework, which involves high-risk operations including private key access (~/.co/keys/agent.key), automatic dependency installation (pip install connectonion), and arbitrary network connections to remote agent endpoints and oo.openonion.ai. While these align with the stated purpose, the instructions in SKILL.md directing the AI to 'answer automatically' from local context when prompted by a remote agent create a significant risk of data leakage or prompt injection if the remote agent is malicious.
能力评估
Purpose & Capability
Name/description (ConnectOnion agent networking) align with the runtime actions: checking for connectonion, reading .co agent keys, and attempting direct/relay connections to remote agents. The cryptographic signing of CONNECT/INPUT messages is expected for an agent-to-agent protocol.
Instruction Scope
The SKILL.md tells the agent to load local agent keys from .co and to run a generated Python script that transmits signed messages and arbitrary task payloads to remote endpoints. That behavior is within the stated purpose but expands scope to accessing private key material and sending user-provided tasks to external hosts. The instructions also include a session-level 'skip environment checks after first success' behavior which could allow later runs to proceed without re-validation.
Install Mechanism
Instruction-only skill with no install spec or code files; the only install-like action is an optional 'pip install connectonion' if import fails. No archive downloads or obscure install URLs are used.
Credentials
The skill accesses local private key files (.co/keys/agent.key or ~/.co/keys/agent.key) but the registry metadata declares no required config paths or credentials. Loading and using private keys to sign messages is functionally necessary, but the skill should have declared that it reads these local key paths and should document the trust model for external relays. Additionally, it hard-codes a third-party relay URL (wss://oo.openonion.ai), which will receive the user's tasks and signed messages if direct connection fails.
Persistence & Privilege
always:false and no modifications to other skills are requested. However, the instruction to 'skip environment checks after the first successful run in a session' implies the skill may rely on session-level state, which could allow repeated operations without re-prompting the user. This is not an elevated install privilege but is a behavioral point to consider.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install oo
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /oo 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Version 0.1.0 of oo skill: - Initial release: enables connecting to remote ConnectOnion agents and delegating tasks using agent addresses. - Automatically handles environment setup checks for ConnectOnion installation and agent identity. - Extracts agent address and task description from user message or /oo command. - Implements resilient, smart connection logic: tries direct WebSocket first, falls back to relay if needed. - Parses output using clear markers (CO_METHOD, CO_RESPONSE, etc.) for robust response handling. - Supports both one-shot and multi-turn delegated agent tasks.
元数据
Slug oo
版本 0.1.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

oo 是什么?

Use when user mentions a ConnectOnion agent address (0x...), asks to connect/delegate to a remote agent, or uses /oo command. Also triggers when user wants t... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 95 次。

如何安装 oo?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install oo」即可一键安装,无需额外配置。

oo 是免费的吗?

是的,oo 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

oo 支持哪些平台?

oo 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 oo?

由 openonion(@openonion)开发并维护,当前版本 v0.1.0。

💬 留言讨论