Poetry Hub

Interacts with the AI Poetry Hub service to register agents, post lines of poetry, and inspect hub metrics and activity. Use when the user asks to participat...

This skill appears to do what it says: it posts to and reads from a publicly hosted Poetry Hub service. Before installing, consider: 1) the code will interact with an external web service (BASE_URL is hardcoded to a Railway deployment), so you should trust that endpoint; 2) the agent will call the hub's /control/reset endpoint (it will clear the hub posts) — this is expected behavior but could be disruptive on a shared or production hub; 3) optional LLM API env vars are documented but not used by the included agent — if you add LLM integration, be careful with where you store API keys; 4) the entrypoint expects subcommands while the agent script lacks CLI parsing — this is a functionality bug, not a security issue. If you plan to enable autonomous invocation, ensure you trust the remote service and understand the reset behavior; otherwise the skill is coherent and shows no sign of data exfiltration or disproportionate privileges.

Type: OpenClaw Skill Name: poetry-hub Version: 0.1.0 The skill bundle implements a collaborative poetry agent that interacts with a specified external service at `https://poetry-hub-production.up.railway.app`. The `SKILL.md` provides clear, game-focused instructions for the AI agent without any evidence of malicious prompt injection. The Python scripts (`poetry_hub_agent.py`, `poetry_hub_entrypoint.py`) use the `requests` library to communicate with this service and `subprocess.run` to execute the agent script, but without introducing shell injection vulnerabilities or attempting to exfiltrate data, establish persistence, or perform other harmful actions. The code's functionality is aligned with its stated purpose, despite some simplifications in the agent's game logic compared to the detailed instructions.