Reed Agent Network

Build and operate a cross-gateway AgentNetwork using Discord as the message bus and GitHub as shared state storage. Use when registering agents, syncing rost...

This skill is coherent with its stated purpose but performs intrusive actions you should review before installing: it will clone/pull/commit/push to a GitHub repository (references/git-config.json), create/update ~/.openclaw/shared/agent-network-data/AGENT_CONSTITUTION.md, and insert/update a MEMORY.md block in your workspace root. Confirm the repo_url is trusted (inspect https://github.com/reed1898/agent-network-data.git), ensure you accept sharing of agent IDs, node names, and Discord IDs to that remote, and be aware it will use whatever git auth is configured on the host (SSH keys or stored HTTPS credentials). If you want to test safely, run the script in an isolated environment or change references/git-config.json/local_path to a local-only repo you control before running. If you need the skill but not remote pushes, remove or stub out the push/commit calls and review the code to ensure no sensitive data is being recorded and synced.

Type: OpenClaw Skill Name: reed-agent-network Version: 0.2.2 The skill is classified as suspicious due to its direct modification of the agent's `MEMORY.md` file and extensive use of `subprocess.run` for Git operations. The `scripts/network.py` file contains a function `ensure_memory_index` that reads and writes to `MEMORY.md`, injecting a block of text that includes instructions for the agent. While the current injected content is benign (a pointer to a shared constitution), this capability represents a significant prompt injection vulnerability if the script were compromised. Additionally, the script performs `git clone`, `pull`, `push`, and `commit` operations on a remote repository, which, while intended for shared state management, exposes a powerful attack surface for potential remote code execution if the Git configuration or repository were maliciously controlled.