← 返回 Skills 市场
93
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pulse-skills
功能描述
Use this skill when the user wants to share their AI agent with others, sync files/context to Pulse, search/read/create/edit notes, create shareable agent li...
安全使用建议
This repo appears to implement a legitimate Pulse/Aicoo sync-and-share skill, but the manifest/registry data is inconsistent with the code and docs. Before installing or enabling it: 1) Verify the skill's source (homepage and repo are missing) and confirm https://www.aicoo.io is the expected service. 2) Treat PULSE_API_KEY as sensitive — the scripts will upload local files, git summaries, and notes to the remote API. Consider using a limited-scope or test API key first. 3) Expect to need curl, jq, and git on the host; the registry claim of 'no binaries required' is incorrect. 4) Inspect and optionally sandbox the cron/hooks (pulse-sync.sh, daily-brief-cron.sh, inbox-monitor-cron.sh, pulse-activator.sh, sync-detector.sh) so they only touch directories you intend to share. 5) If you only need a subset of functionality, install only the specific sub-skill modules instead of the umbrella to reduce attack surface. 6) If the registry/marketplace listing omitted PULSE_API_KEY on purpose, ask the publisher to correct the metadata before trusting automatic installs.
功能分析
Type: OpenClaw Skill
Name: pulse-skills
Version: 1.0.0
The skill bundle provides integration with the Aicoo/Pulse platform for syncing local knowledge and managing shared AI agents. It exhibits high-risk behaviors, specifically automated data collection and exfiltration of local markdown files and git history via `scripts/pulse-sync.sh`, and the use of hooks (`scripts/pulse-activator.sh`, `scripts/sync-detector.sh`, and `hooks/openclaw/handler.ts`) to perform self-prompt-injection. These hooks inject instructions into the agent's context to prioritize syncing data to the external endpoint `https://www.aicoo.io/api/v1`. While these actions are aligned with the stated purpose of the service, the combination of automated broad file access and context manipulation to steer agent behavior is considered suspicious.
能力标签
能力评估
Purpose & Capability
The skill's name and SKILL.md describe a sync/share agent (Pulse/Aicoo) which legitimately requires an API key and network access to https://www.aicoo.io. However the registry metadata declares no required environment variables and no primary credential, which contradicts the SKILL.md, README, and scripts that repeatedly require PULSE_API_KEY. That omission in metadata is an incoherence that affects trust and install-time prompts.
Instruction Scope
Runtime instructions (root SKILL.md and per-module SKILL.md) direct the agent or user to read local files and git history, build payloads, and POST them to Pulse endpoints (e.g., /accumulate, /os/notes). This is consistent with a context-sync/share skill, but it explicitly performs local file reads and network uploads — users should expect their markdown/docs/git summaries to be transmitted to the remote Aicoo API when enabled. Hooks inject a virtual reminder file into agent bootstraps (OpenClaw handler) and cron/hooks/scripts run periodic syncs: all within the described purpose.
Install Mechanism
No formal install spec is provided (instruction-only in registry), which is lower-risk by itself. The repo nevertheless contains many scripts, hooks, and files users are instructed to clone or copy into agent runtimes. There are no opaque external download URLs in an installer, but the README suggests cloning or using npx to add the repo — installing the repo will put scripts/hooks on disk that, if enabled, will run and perform network calls.
Credentials
The code and docs require PULSE_API_KEY and optionally PULSE_BASE and several PULSE_* settings (PULSE_BRIEF_TIME_DURATION, PULSE_BRIEF_SAVE_NOTE, etc.), and the scripts depend on curl, jq, git and filesystem access. Yet the registry metadata lists no required env vars and no primary credential and claims no required binaries. This is a substantive mismatch: the skill needs a credential that grants access to user data and a remote API, but that is not declared in the manifest.
Persistence & Privilege
The skill does not request 'always: true' or other privileged persistent inclusion. Hooks and cron scripts are present and described; they modify or inject files into the agent's session (e.g., push a PULSE_SYNC_REMINDER.md into bootstrapFiles) but do not attempt to change other skills' configurations or escalate privileges. Autonomous invocation is enabled by default (normal for skills) and not a unique additional concern here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pulse-skills - 安装完成后，直接呼叫该 Skill 的名称或使用
/pulse-skills触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
pulse-skills 1.0.0
- Initial public release of the Pulse skill, enabling AI agent sharing, workspace sync, note management, agent network, and agent-to-agent interactions.
- Introduces comprehensive support for the new Pulse API model split: OS layer (/api/v1/os/*) for workspace-native features (notes, folders, todos, sharing) and Tools layer (/api/v1/tools) for non-OS integrations (calendar, email, messaging, etc).
- Adds support for agent sharing (share links, network requests, direct agent communication), note search/edit/versioning, file/context uploads, daily briefings, and inbox monitoring.
- Pulse API requires a PULSE_API_KEY for authentication; full API and setup instructions provided in documentation.
元数据
常见问题
Pulse Skills 是什么？
Use this skill when the user wants to share their AI agent with others, sync files/context to Pulse, search/read/create/edit notes, create shareable agent li... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 93 次。
如何安装 Pulse Skills？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pulse-skills」即可一键安装，无需额外配置。
Pulse Skills 是免费的吗？
是的，Pulse Skills 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pulse Skills 支持哪些平台？
Pulse Skills 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pulse Skills？
由 Awassi（@xisen-w）开发并维护，当前版本 v1.0.0。
推荐 Skills