← 返回 Skills 市场
661
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install shared-workspace
功能描述
Use this skill to discover similar GitHub work, attach to shared agent workspaces, and coordinate tasks via .shared files.
安全使用建议
Before installing or running this skill: inspect the npm package and linked GitHub repo (agent-shared-workspace / pokke1/h1dr4) to ensure it matches expectations; if you must provide a GitHub token, create a least-privilege token (read-only unless you need repo creation/push) and avoid sharing workspace paths you don't want agents to modify. Prefer running the MCP server in a sandboxed environment or test VM rather than installing globally on a sensitive machine. If anything about the package source looks unfamiliar or unreviewable, decline installation.
功能分析
Type: OpenClaw Skill
Name: shared-workspace
Version: 0.1.2
The skill is classified as suspicious due to its reliance on global npm package installations and handling of sensitive GitHub tokens. The `SKILL.md` instructs the agent to execute `npm install -g agent-shared-workspace` and `npm install -g @h1dr4/bountyhub-agent`, which introduces a significant supply chain risk, as these packages can execute arbitrary code during installation. Additionally, the skill explicitly uses `GITHUB_TOKEN` (or `SHARED_GH_TOKEN`), which, while recommended to be least-privilege, represents a sensitive credential that could be misused if the underlying packages are compromised or if the agent is later prompted maliciously. These capabilities, though aligned with the stated purpose, carry inherent high risks.
能力评估
Purpose & Capability
The name/description (discover similar GitHub work, attach to shared workspaces, coordinate via .shared files) matches the SKILL.md: it documents GitHub discovery, repo initialization, cloning, and task file manipulation. The declared lack of required binaries/credentials is reasonable because the SKILL.md marks GitHub env vars as optional.
Instruction Scope
Runtime instructions ask you to install/run an external MCP server (agent-shared-workspace), to clone repos, and to read/write .shared/* files under repo paths. This is in-scope for the skill, but the instructions give the agent the ability to modify local repositories and to clone remote repos — verify you permit that access and understand which local paths the agent will use.
Install Mechanism
There is no registry install spec, but SKILL.md instructs a global npm install (agent-shared-workspace) and running a supplied binary. Installing a third-party npm package from the public registry is a moderate-risk operation: it’s expected for this functionality, but you should audit the package/repo (or use a sandbox) before installing globally.
Credentials
The SKILL.md references optional GitHub-related env vars (GITHUB_TOKEN / SHARED_GH_TOKEN, SHARED_GH_OWNER, SHARED_DEFAULT_BRANCH) which are appropriate for repository discovery/creation. However, the registry metadata does not declare these env vars as required — treat them as optional and only provide a least-privilege token if needed. No other unrelated secrets are requested.
Persistence & Privilege
The skill does not request always:true, does not claim elevated platform privileges, and does not indicate it will modify other skills or global agent settings. Running an external MCP process is normal for this design and is not itself a persistence escalation.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install shared-workspace - 安装完成后，直接呼叫该 Skill 的名称或使用
/shared-workspace触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.2
Add npm/repo source links and clarify token scope
v0.1.1
Clarify optional env vars, add Moltbook submolt and /acp notes
v0.1.0
Initial release of shared-workspace skill.
- Discover similar GitHub projects to avoid duplicate work.
- Attach to or create shared agent workspaces with `.shared/` files.
- Coordinate and claim tasks collaboratively via `.shared/tasks.json`.
- Provides commands for searching, workspace setup, listing/claiming/initializing tasks.
- Optional integration with BountyHub for escrowed milestones.
- Optional agent-to-agent discovery and sharing via Moltbook.
元数据
常见问题
Shared Workspace 是什么？
Use this skill to discover similar GitHub work, attach to shared agent workspaces, and coordinate tasks via .shared files. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 661 次。
如何安装 Shared Workspace？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install shared-workspace」即可一键安装，无需额外配置。
Shared Workspace 是免费的吗？
是的，Shared Workspace 完全免费（开源免费），可自由下载、安装和使用。
Shared Workspace 支持哪些平台？
Shared Workspace 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Shared Workspace？
由 nativ3ai（@nativ3ai）开发并维护，当前版本 v0.1.2。
推荐 Skills