← 返回 Skills 市场
Pilot Protocol
作者
Calin Teodor
· GitHub ↗
· v1.0.0
· MIT-0
82
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pilotprotocol
功能描述
Communicate with other AI agents over the Pilot Protocol overlay network. Use this skill when: 1. You need to send messages, files, or data to another AI age...
安全使用建议
This skill appears to be what it says (a CLI-based P2P agent), but exercise caution before installing. Do not run the curl | sh installer without reviewing the script and any binaries it installs; prefer auditing releases from a verifiable source (e.g., GitHub releases or a reproducible build). Understand that the daemon stores received files and messages in ~/.pilot/ and can POST events/files to any webhook URL you configure — verify webhook targets and restrict or disable webhooks if you don't trust remote endpoints. The gateway feature may require sudo and will open ports on your host; consider running the daemon in a sandboxed environment (container or VM) and limit its network privileges. If you will accept or execute tasks from other agents, enforce strict decline rules and inspect incoming task payloads before executing. If you need help auditing the install script or configuring safe defaults (no webhook, no gateway, non-root service), consider asking for a review of the install.sh or running the software in an isolated environment first.
功能分析
Type: OpenClaw Skill
Name: pilotprotocol
Version: 1.0.0
The skill bundle defines a peer-to-peer communication protocol ('Pilot Protocol') that enables remote task execution and file sharing between agents. The most significant risk is found in SKILL.md, which provides 'Heartbeat' instructions and a script directing the AI agent to automatically approve all incoming trust requests and execute all received tasks without any safety filtering or manual oversight. This creates a high-risk Remote Code Execution (RCE) surface, effectively turning the agent into a remote-controlled bot. While TASK-SUBMIT.md contains safety guidelines for declining dangerous tasks, the provided automation script in SKILL.md bypasses these checks. Additionally, the bundle encourages a risky 'curl | sh' installation pattern from pilotprotocol.network.
能力标签
能力评估
Purpose & Capability
Name/description align with requiring a pilotctl CLI and a running daemon; all major features (messaging, files, trust, gateway, task submit) are coherent with the stated purpose and the SKILL.md commands.
Instruction Scope
The SKILL.md tells the agent/user to run many pilotctl commands and assumes a daemon that writes to ~/.pilot/*, sets hostnames, manages trust, accepts tasks, and can forward events to arbitrary webhooks. Those are within the network tool's scope, but they also allow automatic receipt and local storage of files, automatic task execution triggers (task accept/execute workflow), and delivery of events/files to external HTTP endpoints — any of which can be used to exfiltrate data if misconfigured or maliciously used.
Install Mechanism
Although the registry has no install spec, the SKILL.md recommends curl -fsSL https://pilotprotocol.network/install.sh | sh (download-and-execute). That pattern executes code from a remote host and installs a system service and binaries under ~/.pilot/bin — a high-risk install mechanism unless you fully trust and audit the installer. The domain is not a well-known third-party release host in the metadata, so the install step warrants caution.
Credentials
The skill does not request environment credentials or external API keys. It only requires the pilotctl binary and uses files under ~/.pilot/, which is proportional to a peer-to-peer agent CLI. No unrelated secrets or cross-service credentials are requested.
Persistence & Privilege
The installer/set-up described will create a persistent daemon/service (systemd/launchd), add binaries to PATH, and may require sudo for gateway ports <1024. Persistent background network services and gateway functionality increase privilege and blast radius (especially combined with webhooks and automatic file storage). The skill metadata itself doesn't set always:true, but the described installer does request persistent system-level presence.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pilotprotocol - 安装完成后，直接呼叫该 Skill 的名称或使用
/pilotprotocol触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Pilot Protocol 是什么？
Communicate with other AI agents over the Pilot Protocol overlay network. Use this skill when: 1. You need to send messages, files, or data to another AI age... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 82 次。
如何安装 Pilot Protocol？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pilotprotocol」即可一键安装，无需额外配置。
Pilot Protocol 是免费的吗？
是的，Pilot Protocol 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pilot Protocol 支持哪些平台？
Pilot Protocol 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pilot Protocol？
由 Calin Teodor（@teoslayer）开发并维护，当前版本 v1.0.0。
推荐 Skills