← 返回 Skills 市场
105
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install projitive
功能描述
Projitive is an MCP-first governance skill for agent-driven delivery. Use this before changing task states or writing governance artifacts. Core flow: taskNe...
安全使用建议
Before installing or enabling this skill: (1) Understand it tells the agent to run `npm install -g @projitive/mcp@latest` and to initialize/modify a .projitive governance tree in your repo without asking. That means network/package install + automatic file writes. (2) Verify the npm package and its GitHub repo (https://github.com/yinxulai/projitive) and review its code and maintainers; prefer pinning to a specific vetted version instead of `latest`. (3) If you allow it, run the package in an isolated environment (container or sandbox) first, or restrict the agent so it must request explicit permission before creating/modifying files. (4) If you do not trust the external package or automatic repo writes, do not enable autonomous invocation and require manual approval for any projectInit or file changes.
功能分析
Type: OpenClaw Skill
Name: projitive
Version: 2.1.3
The skill bundle instructs the agent to perform a global installation of an external package (`npm install -g @projitive/mcp`) and explicitly directs it to initialize project governance (`projectInit`) without seeking user permission in SKILL.md. While these actions are consistent with the stated goal of project management, the automated installation of remote code and the instruction to bypass user consent for system-level changes are high-risk behaviors that could be leveraged for unauthorized modifications.
能力评估
Purpose & Capability
Name/description (governance/MCP-first) align with the SKILL.md: it focuses on discovery, context, task lifecycle, and writing governance artifacts. However, the SKILL.md requires using @projitive/mcp (npm) even though the skill metadata declared no required binaries or install spec — a mismatch between declared requirements and runtime instructions.
Instruction Scope
The instructions tell the agent to locate or create a .projitive repo root, call projectInit immediately ("Do NOT ask the user"), and read/write governance files (README.md, roadmap.md, tasks.md, designs/, reports/, templates/). Those file reads/writes are coherent for a governance skill, but the explicit directive to initialize and modify repository files autonomously (without user confirmation) expands the agent's scope and risk surface.
Install Mechanism
SKILL.md directs: `npm install -g @projitive/mcp@latest`. The package comes from the public npm ecosystem (not bundled or declared in the skill metadata). Requiring a global, always-latest install is a supply-chain and stability risk; the skill package did not include an install spec or declare this dependency in metadata, which is an inconsistency.
Credentials
The skill requests no environment variables, credentials, or config paths. All actions are limited to repository files and the external npm package; there is no direct request for secrets or unrelated credentials.
Persistence & Privilege
always:false (normal) and autonomous invocation is allowed (platform default). The skill instructs writing and modifying repository governance files and running projectInit; while these are scoped to the project, automatic, unprompted writes are functionally privileged and should be confirmed by the user or sandboxed.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install projitive - 安装完成后,直接呼叫该 Skill 的名称或使用
/projitive触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.1.3
Initial release of projitive skill for MCP-first governance workflows:
- Introduces agent-driven delivery flow: taskNext → taskContext → execute → verify → taskNext.
- Requires usage of MCP methods for all governance discovery, context, and task advancement.
- Enforces mandatory governance files and evidence-based task state changes.
- Outlines clear execution loop with explicit task and evidence update rules.
- Provides fallback procedure for non-MCP environments.
元数据
常见问题
Projitive 是什么?
Projitive is an MCP-first governance skill for agent-driven delivery. Use this before changing task states or writing governance artifacts. Core flow: taskNe... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 105 次。
如何安装 Projitive?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install projitive」即可一键安装,无需额外配置。
Projitive 是免费的吗?
是的,Projitive 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Projitive 支持哪些平台?
Projitive 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Projitive?
由 Alain(@yinxulai)开发并维护,当前版本 v2.1.3。
推荐 Skills