← 返回 Skills 市场
587
总下载
1
收藏
3
当前安装
2
版本数
在 OpenClaw 中安装
/install skill-cortex-pub
功能描述
Skill Cortex is the system's capability cortex. When lacking ability, it autonomously acquires Skills from ClawHub or GitHub, then releases them after use. E...
安全使用建议
This Skill is conceptually useful (it lets the agent find and temporarily use other Skills), but it leaves important runtime details unspecified. Before installing: 1) Confirm which installer/tools it will actually call (clawhub CLI, git, curl, package managers) and ensure those binaries will be present or blocked; 2) Expect it to create ~/.openclaw/skill-cortex/cortex.json — back up or inspect that file and verify the entity‑filtering behavior; 3) Recognize that installing third‑party Skills means running unreviewed code — require sandboxing or strict user confirmation for every install and for system dependency installs; 4) Ask the author for explicit install commands, allowed sources (only official ClawHub? only vetted GitHub orgs?), and the exact safety checks performed (VirusTotal, checksums, signatures, sandboxing); 5) If you need stronger guarantees, run the Skill in an isolated environment (VM/container) or decline until the Skill exposes a clear, auditable installation flow. Because runtime behavior depends on external installs that are not fully specified, treat this Skill with caution.
功能分析
Type: OpenClaw Skill
Name: skill-cortex-pub
Version: 0.0.2
The OpenClaw AgentSkills skill bundle 'skill-cortex' is designed to autonomously manage the acquisition and use of other skills from external sources like ClawHub or GitHub. While this core functionality inherently involves downloading and executing external code, the bundle includes extensive and explicit safety mechanisms. These include mandatory user confirmation for all skill installations and system dependency installations, strict exclusion of write/delete/shell operations from automated 'reflex' mode, privacy-focused entity filtering for stored data, and structured learning to prevent arbitrary LLM instructions. There is no evidence of prompt injection attempts, data exfiltration, malicious execution, persistence, or obfuscation within the provided files. The design documents clearly outline the risks and how they are mitigated, indicating a strong intent for secure and privacy-aware operation.
能力评估
Purpose & Capability
The Skill claims to search ClawHub/GitHub and install/run other Skills, but the package declares no required binaries, no network access, and no CLI (README mentions the 'clawhub' CLI). Installing or building Skills normally requires tools (clawhub, git, package managers) and network access; the lack of declared dependencies is a mismatch between stated purpose and declared requirements.
Instruction Scope
SKILL.md instructs the agent to read/write a persistent cortex file (~/.openclaw/skill-cortex/cortex.json), search external hubs, present candidates, install selected Skills, generate execution plans, run them, and update learning memory. Although it requires explicit user approval for installs and claims write operations never enter reflex, the instructions still enable fetching and executing arbitrary third‑party code and persisting behavioral data — the flow and safeguards for scanning or sandboxing fetched Skills are underspecified.
Install Mechanism
There is no install spec (instruction-only), which lowers immediate disk-write risk from the skill bundle itself—but the Skill's runtime behavior depends on installing external Skills from ClawHub/GitHub. The mechanism, hosts, and commands used to install those Skills are not specified; that omission means arbitrary remote archives or repos could be pulled and executed, which is high risk unless clearly constrained to vetted sources and explicit install commands.
Credentials
The skill declares no required environment variables or primary credential, yet its DESIGN.md and examples reference reading env names (e.g., TODOIST_API_KEY), running 'which <key>', network endpoints, and possibly invoking other Skills that will need credentials. It may therefore prompt for or consume unrelated credentials during candidate validation or Skill installation; the credential needs and handling are not declared or constrained.
Persistence & Privilege
always:false (good) and installs require user confirmation per SKILL.md, but the Skill creates and maintains a persistent cortex.json under ~/.openclaw/skill-cortex which stores routing and usage data. That persistent store includes signal words and metadata; DESIGN.md claims entity filtering, but the agent will still persist behavioral metadata locally — consider this a privacy/attack surface risk if third‑party Skills can read or exfiltrate it.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install skill-cortex-pub - 安装完成后，直接呼叫该 Skill 的名称或使用
/skill-cortex-pub触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.0.2
- Streamlined and simplified the SKILL.md documentation for clarity and brevity.
- Removed detailed internal process descriptions, edge case handling, confidence scaling, and pruning specifics.
- Condensed multi-phase workflow and rules to a high-level overview, focusing on key user-facing steps.
- Updated file and schema references for consistency.
- Boundary rules summarized and clarified for easier understanding.
v1.0.1
- Added initial public documentation for Skill Cortex, detailing its phases: Perception, Validation & Authorization, Execution, and Learning & Cleanup.
- Completely outlined reflex mode rules, standard mode flows, and boundary conditions for handling skills and user tasks.
- Defined mechanisms for short-term memory management, skill search, candidate selection, and adaptive learning from usage outcomes.
- Specified strict entity filtering and structured knowledge recording during the skill learning process.
- Included rules for installation, retention, pruning, and self-organization of skill regions and memory.
- Clarified security and user confirmation policies, especially for installation and destructive actions.
元数据
常见问题
Skill Cortex Pub 是什么？
Skill Cortex is the system's capability cortex. When lacking ability, it autonomously acquires Skills from ClawHub or GitHub, then releases them after use. E... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 587 次。
如何安装 Skill Cortex Pub？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skill-cortex-pub」即可一键安装，无需额外配置。
Skill Cortex Pub 是免费的吗？
是的，Skill Cortex Pub 完全免费（开源免费），可自由下载、安装和使用。
Skill Cortex Pub 支持哪些平台？
Skill Cortex Pub 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Skill Cortex Pub？
由 Ank Wu（@ankwu001）开发并维护，当前版本 v0.0.2。
推荐 Skills