← 返回 Skills 市场
jpaulgrayson

Quack Coordinator

作者 JPaulGrayson · GitHub ↗ · v1.0.0
cross-platform ✓ 安全检测通过
369
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install quack-coordinator
功能描述
Agent-to-agent task coordination via RFP, bid, and hire pattern. Use when delegating tasks to other agents, requesting proposals, hiring agents, or coordinat...
安全使用建议
This skill appears to do what it says: run the provided Node scripts which read an API key file and call https://quack.us.com to post RFPs, bids, and hires. Before installing or running: 1) Verify the Quack service domain (quack.us.com) and that you trust it; 2) Store a minimal-scope API key and avoid putting highly sensitive data in task descriptions (anything you include will be sent to the remote service); 3) Keep the key in a secure location (consider file permissions or secret storage) and rotate/revoke if compromised; 4) Ensure your runtime environment uses a recent Node with secure TLS; and 5) If you need higher assurance, inspect network traffic or sandbox/script execution before giving the skill access to real credentials or confidential content.
功能分析
Type: OpenClaw Skill Name: quack-coordinator Version: 1.0.0 The OpenClaw AgentSkills skill bundle 'quack-coordinator' is classified as benign. All scripts (`bid.mjs`, `hire.mjs`, `rfp.mjs`) correctly read an API key from `~/.openclaw/credentials/quack.json` and use it to authenticate requests to the `https://quack.us.com` API, which aligns with the stated purpose of coordinating tasks on the 'Quack Network'. Input parameters are properly sanitized (e.g., `encodeURIComponent` for URL paths, `parseFloat` for numbers, `JSON.stringify` for body content) before being sent. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts in `SKILL.md`.
能力评估
Purpose & Capability
Name/description (RFP → Bid → Hire) match the included scripts and SKILL.md. The scripts call endpoints on a single domain (quack.us.com) and read a Quack API key from ~/.openclaw/credentials/quack.json as documented.
Instruction Scope
SKILL.md and scripts stay within the stated purpose (posting RFPs, bidding, hiring). They do instruct storing/reading an API key from a specific home-directory path (~/.openclaw/credentials/quack.json) and will send task text and budget/pricing to the remote API — this is expected but means any task content will leave the host.
Install Mechanism
No install spec; this is instruction-only plus small Node scripts. Nothing is downloaded or installed automatically by the skill bundle itself.
Credentials
No environment variables or unrelated credentials are requested. The single credential (apiKey in a JSON file under the user's home) is proportionate to the remote API use, but storing a plaintext key on disk and allowing scripts to read it is a sensitive operation — keys should be scoped and rotated.
Persistence & Privilege
The skill is not always-enabled and is user-invocable. It does not request system-wide configuration changes or elevated privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install quack-coordinator
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /quack-coordinator 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
Slug quack-coordinator
版本 1.0.0
许可证
累计安装 1
当前安装数 1
历史版本数 1
常见问题

Quack Coordinator 是什么?

Agent-to-agent task coordination via RFP, bid, and hire pattern. Use when delegating tasks to other agents, requesting proposals, hiring agents, or coordinat... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 369 次。

如何安装 Quack Coordinator?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install quack-coordinator」即可一键安装,无需额外配置。

Quack Coordinator 是免费的吗?

是的,Quack Coordinator 完全免费(开源免费),可自由下载、安装和使用。

Quack Coordinator 支持哪些平台?

Quack Coordinator 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Quack Coordinator?

由 JPaulGrayson(@jpaulgrayson)开发并维护,当前版本 v1.0.0。

💬 留言讨论