← 返回 Skills 市场
786
总下载
2
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install opensoul-cloud
功能描述
Share anonymized OpenClaw configurations with the OpenSoul community. Use when user wants to share their agent setup, discover how others use OpenClaw, or ge...
安全使用建议
This skill appears to do what it says (extract, anonymize, summarize, upload), but you should not blindly share your workspace until you confirm a few things:
- Preview the anonymized output every time (opensoul share --preview) and manually inspect it for anything sensitive before uploading. The anonymizer is best-effort regex/name/project extraction and can miss secrets or context.
- Inspect the upload behavior: the repository listing included many scripts but the upload implementation was omitted from the provided files. Ask for or review scripts/upload.ts to confirm exactly what JSON/files are POSTed and which Authorization header is used.
- Verify the upload destination. The API default is a supabase instance (https://vztykbphiyumogausvhz.supabase.co/functions/v1) while the public site is https://opensoul.cloud — confirm these endpoints belong to the same project and operator you trust.
- Be aware that registration creates and stores an API key in ~/.opensoul/credentials.json; treat that file like any secret. Delete it to de-register if you stop using the service.
- Consider sharing a sanitized test workspace first (no real secrets, minimal memory) to observe the end-to-end behavior and the resulting remote record.
If you want, I can:
- Inspect the missing upload.ts (if you provide it) to confirm upload fields and destination,
- Run a simulated preview/anonymization on a sample workspace to show what would be shared (if you paste sample outputs), or
- Suggest additional anonymization checks you can add before uploading (e.g., explicit .env detection, token pattern expansion, manual denylist).
功能分析
Type: OpenClaw Skill
Name: opensoul-cloud
Version: 1.0.3
The skill bundle is classified as suspicious due to a significant prompt injection vulnerability. The `scripts/import.ts` file downloads arbitrary markdown files (SOUL.md, AGENTS.md, IDENTITY.md) from the external OpenSoul community (`opensoul.cloud`) into the user's agent workspace. The `SKILL.md` instructions then explicitly guide the OpenClaw agent to read and interpret these imported files, creating a direct vector for prompt injection. A malicious 'soul' uploaded to the OpenSoul platform could contain harmful instructions, potentially compromising the user's agent when the imported content is processed.
能力评估
Purpose & Capability
The name/description (share anonymized OpenClaw workspaces) aligns with the code: extract.ts reads workspace files, anonymize.ts scrubs PII, summarize.ts produces a shareable profile, and other scripts handle register/list/delete/browse/import — all expected for a sharing service. The skill stores its own credentials in ~/.opensoul/credentials.json as part of registration, which is consistent with a service-backed sharing flow.
Instruction Scope
Runtime instructions require running the bundled CLI which will read many local files (SOUL.md, AGENTS.md, IDENTITY.md, TOOLS.md, MEMORY.md, cron jobs at ~/.openclaw/cron/jobs.json, skills folder, etc.). The SKILL.md explicitly instructs agents to preview anonymized output and ask for user confirmation before uploading, which is good. The anonymizer is best-effort (regex + name/project extraction) — it reads USER.md to extract the human name so it can be redacted, which is reasonable. However, one key file (upload.ts) was not provided in the truncated listing, so I cannot verify exactly what gets POSTed and to which endpoint or whether further data is appended before upload — this gap reduces assurance.
Install Mechanism
No install spec is included (instruction-only), so nothing is silently downloaded during install. The CLI expects Node.js and tsx available (SKILL.md asks users to npm i -g tsx). That is a low-risk, transparent runtime requirement.
Credentials
The skill declares no required environment variables, which is accurate. At runtime it uses/accepts OPENSOUL_API and OPENCLAW_WORKSPACE overrides and can use OLLAMA-related env vars for optional local LLM summarization. Registration contacts a third-party API and receives an opensoul API key which is stored in ~/.opensoul/credentials.json; that is expected for a service-backed uploader, but it is a sensitive credential stored locally. The service domain used by the API default (a supabase host) differs from the public 'https://opensoul.cloud' URL in constants.md — likely okay (separate frontend/backend), but worth confirming the upload destination.
Persistence & Privilege
always:false (no forced inclusion). The skill writes its own credentials to ~/.opensoul/credentials.json and writes imported souls to ~/.openclaw/workspace/imported/<id>/ — these are scoped to the skill and workspace. It does not request system-level privileges or try to change other skills' configs in the inspected code. Agent autonomous invocation is allowed (default) which is normal for skills; that combined with network uploads increases risk only if upload behavior is untrusted.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install opensoul-cloud - 安装完成后，直接呼叫该 Skill 的名称或使用
/opensoul-cloud触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.3
Fix: Delete uses path param instead of query param
v1.0.2
Fix: Use tsx instead of ts-node. Add: list and delete commands.
v1.0.1
Fix: Use tsx instead of ts-node for Node.js compatibility
v1.0.0
Initial release. Share anonymized OpenClaw configurations with the OpenSoul community. Includes register, share, browse, suggest, and import commands. Supports local LLM summaries.
元数据
常见问题
OpenSoul - Agent Soul Sharing and Community 是什么？
Share anonymized OpenClaw configurations with the OpenSoul community. Use when user wants to share their agent setup, discover how others use OpenClaw, or ge... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 786 次。
如何安装 OpenSoul - Agent Soul Sharing and Community？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install opensoul-cloud」即可一键安装，无需额外配置。
OpenSoul - Agent Soul Sharing and Community 是免费的吗？
是的，OpenSoul - Agent Soul Sharing and Community 完全免费（开源免费），可自由下载、安装和使用。
OpenSoul - Agent Soul Sharing and Community 支持哪些平台？
OpenSoul - Agent Soul Sharing and Community 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 OpenSoul - Agent Soul Sharing and Community？
由 fnaser（@fnaser）开发并维护，当前版本 v1.0.3。
推荐 Skills