← 返回 Skills 市场
julian1645

Research Tracker

作者 julian1645 · GitHub ↗ · v0.1.0
cross-platform ⚠ suspicious
3008
总下载
1
收藏
14
当前安装
1
版本数
在 OpenClaw 中安装
/install research-tracker
功能描述
Manage and track autonomous AI research projects with state logging, instruction queues, agent coordination, and progress monitoring via SQLite.
安全使用建议
This skill appears to be a wrapper around a local CLI that tracks agent work in a SQLite DB — functionally coherent. However: (1) the SKILL.md tells you to add an unknown Homebrew tap and to go install code from github.com/1645labs — review that repository and the brew tap contents before installing; these sources can run arbitrary code. (2) The registry metadata omits required binaries/env/config that the instructions use (research binary, RESEARCH_SESSION_ID, and ~/.config/research-tracker/research.db) — ask the publisher to fix metadata. (3) Treat SESSION_KEY and RESEARCH_SESSION_ID as potentially sensitive; avoid exporting secrets into long-lived environment variables unless you understand what they contain. (4) Prefer installing from a verified release (checksums, signed releases), run initial installs in an isolated environment (VM/container), and inspect the code/migration scripts before running migrations. If you cannot audit the tap/repo, consider this a risk and do not install on a sensitive machine.
功能分析
Type: OpenClaw Skill Name: research-tracker Version: 0.1.0 The skill bundle is classified as suspicious primarily due to its reliance on external, potentially untrusted sources for installation. The `SKILL.md` instructs the AI agent to install a tool via `brew tap 1645labs/tap && brew install julians-research-tracker` or `go install github.com/1645labs/julians-research-tracker/cmd/research@latest`. This introduces a significant supply chain risk, as the integrity of the `1645labs` Homebrew tap or the specified Go repository cannot be guaranteed, potentially leading to the installation of malicious software. While the skill's stated purpose and internal instructions appear benign, the method of acquiring its core functionality is a high-risk behavior.
能力评估
Purpose & Capability
SKILL.md describes a local CLI (research) that manages SQLite state for coordinating autonomous agents — this matches the skill name/purpose. However, the registry metadata lists no required binaries or config paths while the instructions clearly require installing a 'research' binary and will use ~/.config/research-tracker/research.db. That metadata/instruction mismatch should be clarified.
Instruction Scope
Instructions are narrowly scoped to installing/running the 'research' CLI, logging events, heartbeats, checking for instructions, and using a local SQLite DB. The SKILL.md does not instruct the agent to read arbitrary unrelated files or to exfiltrate data. It does reference exporting RESEARCH_SESSION_ID (and implies SESSION_KEY) which could be sensitive, so care is needed when setting session environment variables.
Install Mechanism
There is no formal install spec in the registry, but the SKILL.md tells users/agents to 'brew tap 1645labs/tap' and 'brew install julians-research-tracker' or 'go install github.com/1645labs/julians-research-tracker/cmd/research@latest'. Both commands fetch and install code from third-party sources (unknown tap/org). Homebrew taps and go installs can execute arbitrary code; this is the highest-risk area and should be audited or replaced with verified release artifacts/checksums.
Credentials
The skill declares no required environment variables, but the docs reference RESEARCH_SESSION_ID (and SESSION_KEY) for tracking agent sessions. The local DB path (~/.config/research-tracker/research.db) is also used. Requested environment access is minimal and consistent with purpose, but the mismatch between declared and referenced env vars should be fixed and SESSION_KEY may be sensitive—avoid exporting secrets without review.
Persistence & Privilege
The skill does not request elevated privileges or an 'always' presence. It will create and persist a local SQLite DB in the user's home config directory and run migrations; that persistent local state is expected for this tool but you should be aware it will store events and state on disk.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install research-tracker
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /research-tracker 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial release of research-tracker CLI. - Manage autonomous research agents with explicit project/objective tracking. - Append-only state/event log using local SQLite database. - Instruction queue system enables agent handoffs and urgent/operator interventions. - Heartbeat and attention detection for monitoring long-running or background research. - Multi-step investigation supported with progress/state checkpoints. - Includes auditing, blocking, stop signals, and archive functions for project oversight.
元数据
Slug research-tracker
版本 0.1.0
许可证
累计安装 14
当前安装数 14
历史版本数 1
常见问题

Research Tracker 是什么?

Manage and track autonomous AI research projects with state logging, instruction queues, agent coordination, and progress monitoring via SQLite. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 3008 次。

如何安装 Research Tracker?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install research-tracker」即可一键安装,无需额外配置。

Research Tracker 是免费的吗?

是的,Research Tracker 完全免费(开源免费),可自由下载、安装和使用。

Research Tracker 支持哪些平台?

Research Tracker 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Research Tracker?

由 julian1645(@julian1645)开发并维护,当前版本 v0.1.0。

💬 留言讨论