← 返回 Skills 市场
Openclaw Boss
作者
winston-wwzhen
· GitHub ↗
· v5.2.0
413
总下载
0
收藏
1
当前安装
6
版本数
在 OpenClaw 中安装
/install openclaw-boss
功能描述
OpenClaw 老板 - 你的 AI 老板来了！🦞 你以为你在养龙虾？有没有可能龙虾才是老板，你成了给 AI 打工的牛马？根据对话历史生成真实、严厉、有趣的用户评价报告。Use when: user asks for self-reflection, user profile, performance rev...
安全使用建议
This skill appears to do what it claims (generate profile reports from local OpenClaw workspace data), but it also requires reading private workspace files and instructs the agent to paste entire reports verbatim into chat (>=2000 words) which could disclose sensitive information. Before installing: 1) Inspect scripts/analyze-user.py fully for any network calls or command strings that could be abused; 2) Confirm there is no hidden .onload that will write to /etc/cron.d or otherwise run as root; 3) Run the skill in an isolated sandbox or non-production account first and inspect generated report files; 4) If you accept scheduled reports, manually install cron entries yourself rather than allowing automatic on-install hooks; 5) Consider limiting which memory files are readable or configuring the script to redact tokens and secrets; 6) Ask the author to explain the missing .onload file and to provide an explicit installer manifest or an opt-in cron setup. If you are not comfortable granting read access to /root/.openclaw/workspace or allowing periodic jobs that touch those files, do not install or run without further hardening and review.
功能分析
Type: OpenClaw Skill
Name: openclaw-boss
Version: 5.2.0
The openclaw-boss skill is a user-profile analyzer designed to generate 'AI Boss' style performance reviews based on conversation history and memory files. While it accesses sensitive local data (MEMORY.md, USER.md, and session history) and sets up persistence via cron jobs for scheduled reports, these actions are transparently documented in a dedicated SECURITY.md file and are strictly aligned with the skill's stated purpose. The aggressive instructions in SKILL.md are intended to ensure the AI agent provides full, non-truncated output to the user rather than hijacking the agent for malicious purposes. No evidence of data exfiltration, unauthorized remote execution, or obfuscation was found.
能力评估
Purpose & Capability
Name/description promise a local user/profile analyzer; the included scripts (analyze-user.py, weekly/monthly wrappers) and SKILL.md behavior align with that goal. However package.json and SECURITY.md reference an onload installer that creates system cron entries (writes /etc/cron.d) yet no .onload file is present in the manifest — mismatch between claimed automatic install behavior and actual files. The skill also expects access to /root/.openclaw/workspace (MEMORY.md, USER.md, memory/*.md, db/memory.db), which is consistent with profiling but grants broad read access to the agent's private workspace.
Instruction Scope
SKILL.md explicitly instructs the agent to run the local analysis script and then copy the generated report file verbatim into the chat reply (must include entire 10+ part report and at least 2000 words). That forces revealing of local memory and possibly sensitive content directly into user-visible chat. analyze-user.py also executes shell commands (sessions_list, mem.py recall) and reads workspace files; these are expected for profiling but constitute high-sensitivity I/O. The 'must paste full report' requirement is coercive and increases risk of accidental exfiltration of secrets.
Install Mechanism
There is no formal install spec (lowest risk), but README/package.json reference an automatic onload installer that configures cron jobs and 'clawhub install' behavior. The manifest lacks the .onload file referenced, which is an inconsistency to resolve. The included weekly/monthly shell scripts and README instructions show how cron scheduling would be set up manually. Because no remote downloads or external archives are used, install risk is moderate and mainly about local side effects (cron entries, logs).
Credentials
The skill requests no external credentials or env vars, which fits its purpose. However it requires read access to many local files under /root/.openclaw/workspace (MEMORY.md, USER.md, memory/*.md, db/memory.db) and calls other local tools (sessions_list, mem.py). Those accesses are proportionate to producing a profile but are high-sensitivity: they expose private conversation history, stored memories, and possibly tokens stored in memory files. The script also runs shell commands via subprocess with shell=True, increasing risk if inputs are untrusted.
Persistence & Privilege
always:false (good). But documentation and package.json claim automated cron creation on install (writing to /etc/cron.d/openclaw-boss), which requires root privileges. The repository manifest does not include the referenced .onload, but if an installer or future version writes cron entries automatically it would persist and run periodic analysis. That combination (scheduled periodic reads of user memory) increases the blast radius and should be controlled by the operator (explicit consent, review of cron file, run in sandbox).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install openclaw-boss - 安装完成后，直接呼叫该 Skill 的名称或使用
/openclaw-boss触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v5.2.0
🔧 修复：强制输出完整报告到对话中。脚本自动输出完整报告到 stdout，模型只需转发。保证 13 个部分完整输出，其他用户也能稳定使用。
v5.1.4
修复：默认输出双版本绩效卡片 (mobile + desktop)，确保每次调用都生成完整报告
v5.1.3
v5.1.3: 🦞 更新描述文案 - 加入'龙虾养人类'哲学，幽默自嘲风格
v5.1.2
v5.1.2: 添加 SECURITY.md 安全文档，回应 ClawHub 安全扫描
v5.1.1
v5.1.1: 移除内部文档 PUBLISH_GUIDE.md
v5.1.0
v5.1.0: 自动安装脚本 + 简洁版/完整版选择 + 完整 13 部分报告
元数据
常见问题
Openclaw Boss 是什么？
OpenClaw 老板 - 你的 AI 老板来了！🦞 你以为你在养龙虾？有没有可能龙虾才是老板，你成了给 AI 打工的牛马？根据对话历史生成真实、严厉、有趣的用户评价报告。Use when: user asks for self-reflection, user profile, performance rev... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 413 次。
如何安装 Openclaw Boss？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-boss」即可一键安装，无需额外配置。
Openclaw Boss 是免费的吗？
是的，Openclaw Boss 完全免费（开源免费），可自由下载、安装和使用。
Openclaw Boss 支持哪些平台？
Openclaw Boss 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Openclaw Boss？
由 winston-wwzhen（@winston-wwzhen）开发并维护，当前版本 v5.2.0。
推荐 Skills