OpenAlexandria

Query and submit artifacts to the OpenAlexandria federated knowledge protocol (reference node by default).

This skill appears to implement exactly what it advertises. Before installing: (1) verify you trust the default node URL or set OPENALEXANDRIA_BASE_URL to a node you control; (2) never submit sensitive data — submissions send whatever JSON you provide to a remote server; (3) store your OPENALEXANDRIA_API_KEY securely and avoid exposing it to agents you don't fully trust; (4) consider disabling autonomous invocation for agents that have access to this skill if you want to prevent automated submissions; and (5) note that the source/homepage is unknown — if you need stronger assurance, inspect the included Python file locally or ask the publisher for provenance.

Type: OpenClaw Skill Name: openalexandria Version: 0.2.0 The skill bundle provides a client for the OpenAlexandria protocol, allowing agents to query and submit JSON artifacts to a federated knowledge base. The `SKILL.md` clearly outlines the skill's purpose and usage without any prompt injection attempts. The `openalexandria_cli.py` script uses standard Python libraries (`urllib.request`, `json`, `os`) to perform HTTP requests and handle JSON data. It reads API keys from environment variables and allows submitting user-specified JSON files. All network interactions are to the declared OpenAlexandria endpoints, and there is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The functionality is entirely aligned with its stated purpose.