← 返回 Skills 市场
Setup Client Workspace (TNCG)
作者
Erwan Lee Pesle
· GitHub ↗
· v1.1.0
· MIT-0
99
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install setup-client-workspace
功能描述
Mise en place d'un workspace agent dédié pour un nouveau client TNCG. Utiliser quand Erwan demande de configurer un nouvel agent client (workspace, fichiers...
安全使用建议
This skill is plausibly a legitimate onboarding playbook, but it performs system-level configuration and asks you to store and propagate many secrets without declaring them. Before installing or running it: 1) Verify you trust the source (the files will edit ~/.openclaw and openclaw.json and restart the gateway). 2) Back up openclaw.json and any system config and confirm who is authorized to make these changes. 3) Confirm where API keys will be stored — the procedure writes per-agent OpenAI keys into auth-profiles.json and into sandbox envs; ensure keys are generated per-agent and have least privilege. 4) Audit any 'clawhub install' packages and copied skills (self-improving-agent, tavily-search, escalation) before running them. 5) Pin sandbox images and avoid wildcard allowSendTo = ["*"] unless you accept sending messages to arbitrary numbers. 6) Make the required secrets and env vars explicit in your deployment checklist (HOOKS_TOKEN, GATEWAY_HOST/PORT, NANGO_PROD_SECRET_KEY, TAVILY_API_KEY, JINA_API_KEY, per-agent OPENAI_API_KEY). 7) If an autonomous agent will execute these instructions, restrict that agent's rights and require human approval for the actual config changes. If you want a stricter assessment, provide logs of any 'clawhub install' operations, the openclaw.json target before/after, and the exact commands you expect the agent to run so I can check for inconsistencies or hidden endpoints.
功能分析
Type: OpenClaw Skill
Name: setup-client-workspace
Version: 1.1.0
The bundle provides instructions for an agent to perform high-privilege administrative tasks, including modifying the global 'openclaw.json' configuration, managing Docker sandboxes with external bind mounts, and handling sensitive credentials like GitHub tokens and OpenAI API keys. While these actions are aligned with the stated purpose of setting up client workspaces, the instructions involve risky operations such as using Python scripts to manually inject credentials into auth profiles and enabling broad inter-agent communication (references/openclaw-config.md and references/legacy-monolith.md). The use of 'dangerouslyAllowExternalBindSources' and the requirement for the agent to restart the gateway process represent a significant security surface.
能力评估
Purpose & Capability
The name/description align with the instructions: creating a workspace, generating SOUL/IDENTITY/USER/MEMORY/TOOLS files, configuring openclaw.json, pairing WhatsApp and enabling a sandbox are coherent tasks for a setup/orchestrator skill. The requested actions (editing workspace files, creating agent entries, WhatsApp pairing) are expected for onboarding.
Instruction Scope
The SKILL.md and referenced docs instruct reading/writing system paths (e.g. ~/.openclaw, /home/ubuntu/.openclaw/agents/...), editing openclaw.json, restarting the gateway, running docker/systemctl checks, creating socat bridges and copying/ installing other skills. They also reference environment variables and secrets (HOOKS_TOKEN, GATEWAY_HOST, GATEWAY_PORT, NANGO_PROD_SECRET_KEY, TAVILY_API_KEY, JINA_API_KEY, per-agent OPENAI_API_KEY, etc.) that are not declared in metadata. Because the skill is instruction-only, these instructions are the security surface — they ask an operator/agent to touch system-wide config and sensitive credentials, which is within the setup scope but must be made explicit to downstream operators.
Install Mechanism
This is an instruction-only skill with no install spec and no bundled code to execute. It references running local commands like 'clawhub install' and copying skills from other workspaces, but there are no external download URLs or archive extraction steps in the skill files. That lowers tooling-install risk, though the 'clawhub install' step will pull external packages at runtime (not described in metadata).
Credentials
The documentation requires multiple sensitive keys and secrets (per-agent OPENAI_API_KEY to be stored in auth-profiles.json and in container env, NANGO_PROD_SECRET_KEY, TAVILY_API_KEY, JINA_API_KEY, HOOKS_TOKEN, gateway host/port, etc.). These are relevant to the onboarding workflow, but the skill metadata declares no required env/config items. Storing API keys into agent auth JSON files (written to disk) and propagating keys into sandbox envs is justified for Whisper/SDK access, but is sensitive and should be explicit in the skill metadata and operator consent. The number and breadth of secrets is significant for a single onboarding playbook.
Persistence & Privilege
The skill's procedures modify global/system configuration (openclaw.json), add agents to inter-agent allow lists, copy other skills, and restart the gateway — actions that change system-wide state. This is expected for a setup/orchestrator but represents high privilege. The skill metadata does not request 'always: true' and is user-invocable, which is appropriate; nevertheless, the operator must be aware these steps will affect other agents and services.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install setup-client-workspace - 安装完成后，直接呼叫该 Skill 的名称或使用
/setup-client-workspace触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.0
v1.1.0: escalation via webhook gateway au lieu de sessions_send, skill escalation intégré au workflow d'onboarding
元数据
常见问题
Setup Client Workspace (TNCG) 是什么？
Mise en place d'un workspace agent dédié pour un nouveau client TNCG. Utiliser quand Erwan demande de configurer un nouvel agent client (workspace, fichiers... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 99 次。
如何安装 Setup Client Workspace (TNCG)？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install setup-client-workspace」即可一键安装，无需额外配置。
Setup Client Workspace (TNCG) 是免费的吗？
是的，Setup Client Workspace (TNCG) 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Setup Client Workspace (TNCG) 支持哪些平台？
Setup Client Workspace (TNCG) 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Setup Client Workspace (TNCG)？
由 Erwan Lee Pesle（@superworldsavior）开发并维护，当前版本 v1.1.0。
推荐 Skills