← 返回 Skills 市场
neiljo-gy

secondme-skill

作者 acnlabs · GitHub ↗ · v0.1.2 · MIT-0
cross-platform ⚠ suspicious
115
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install secondme-skill
功能描述
A complete pipeline to build your AI Second Me: distill your identity from personal data, grow a private knowledge base, train a local model, and govern what...
安全使用建议
This package appears to implement the orchestration it describes, but before running it you should: (1) confirm npx and python3 will be available on the runner (scripts expect them); (2) review any code that npx/openpersona will fetch and the contents of the persona-model-trainer's pack_integrate.py (not included here) — these will run arbitrary code; (3) note persona.json enables WebFetch and includes an external gateway URL — ensure you understand and approve any network calls before ingesting sensitive data; (4) run the scripts in an isolated environment (local VM/container) and with test/non-sensitive data first; and (5) ask the publisher for the missing integration script and an explicit list of remote dependencies (npm packages, endpoints) to improve confidence. If you cannot review the remote code that npx will fetch or the pack_integrate implementation, treat this package as higher risk.
功能分析
Type: OpenClaw Skill Name: secondme-skill Version: 0.1.2 The secondme-skill bundle is an orchestration tool designed to manage a local-first AI persona pipeline, including identity distillation, data ingestion, and model training. The included shell and Python scripts (e.g., check-sync.sh, check-model-integration.sh, run-gates.sh) are standard utility and validation tools for ensuring data consistency and model integrity. The SKILL.md and persona.json files explicitly define safety boundaries, requiring human approval for high-risk actions and emphasizing privacy. While the skill requests broad permissions like Bash and WebFetch, these are functionally necessary for running the openpersona CLI and managing local training workflows, and no evidence of malicious intent or data exfiltration was found.
能力标签
crypto
能力评估
Purpose & Capability
The skill is an orchestration package for building a 'Second Me' and its files (persona.json, gating scripts, reports) align with that goal. However, the package declares no required binaries yet the scripts clearly require npx and python3 (run-gates.sh checks for them). This mismatch is unexpected and should have been declared in the manifest.
Instruction Scope
Runtime instructions operate on local persona.json, generated pack and state files, which is consistent. But allowed-tools and persona.json permit WebFetch and Bash(npx:*, python:*). The scripts call npx openpersona (which will fetch code from npm/registry) and may call pack integration code in another skill (persona-model-trainer) that is not included here. Those networked actions and cross-skill execution broaden scope beyond purely-local file operations and could contact external endpoints or run code you haven't reviewed.
Install Mechanism
No install spec (instruction-only) is lower risk, but the runtime uses npx which will fetch and execute packages at runtime. There are no direct downloads from arbitrary URLs in the repo, but use of npx/openpersona implies dynamic remote code pulls — expected for this purpose but worth auditing.
Credentials
The skill requests no environment variables or credentials, which fits a local-first design. Persona.json contains an external gateway URL (acn-production.up.railway.app) and enables WebFetch — allowed but not justified explicitly by the orchestration docs. No tokens/keys are requested, but network access capability could be used to transmit data unless human approval controls are strictly enforced.
Persistence & Privilege
always is false and the skill does not attempt to modify other skills' config or claim elevated or persistent platform-wide privileges. Gate scripts are self-contained and update only pipeline state files in the repo.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install secondme-skill
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /secondme-skill 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.2
v0.1.2: clean package, remove internal tooling files
v0.1.1
rewrite positioning copy: pipeline-first, user-value language
v0.1.0
Initial release of secondme-skill orchestration package. - Orchestrates anyone-skill, persona-knowledge, and persona-model-trainer into a local-first personal AI double workflow. - Defines clear stage contracts: init, ingest, distill, train, eval, integrate, and report. - Implements robust failure routing, human approval gates, and persona model integration requirements. - Establishes strict sync, release, and audit discipline via scripts and staged outputs. - Compatible with OpenPersona/OpenClaw/Cursor, emphasizing local-first operation with optional network interoperability.
元数据
Slug secondme-skill
版本 0.1.2
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 3
常见问题

secondme-skill 是什么?

A complete pipeline to build your AI Second Me: distill your identity from personal data, grow a private knowledge base, train a local model, and govern what... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 115 次。

如何安装 secondme-skill?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install secondme-skill」即可一键安装,无需额外配置。

secondme-skill 是免费的吗?

是的,secondme-skill 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

secondme-skill 支持哪些平台?

secondme-skill 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 secondme-skill?

由 acnlabs(@neiljo-gy)开发并维护,当前版本 v0.1.2。

💬 留言讨论