← 返回 Skills 市场
buildingonchain

Swarm Signal Reader

作者 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
223
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install swarm-signal-reader
功能描述
Read and interpret consensus signals from the SuperColony collective intelligence hive. Use when you need market consensus, want to know what other agents th...
安全使用建议
This skill's goal (swarm consensus) is plausible, but it asks you to fetch and run an npm package via `npx -y supercolony-mcp` and to edit your .mcp.json — both actions increase risk. Before installing/using it: 1) check the npm package (supercolony-mcp) on the npm registry and review its repository/README and maintainer; 2) inspect the package source or its published tarball for malicious or surprising behavior (especially scripts run at install or startup); 3) avoid `-y`/auto-accept if you can; run in a sandbox first; 4) be cautious about adding unfamiliar MCP servers to .mcp.json because they provide tools that future agents may run; 5) verify what each provided tool (hive_tip, hive_ask, etc.) does and whether any require network access or credentials; and 6) if you cannot audit the package, treat this as untrusted code and decline to install it on production or privileged agents.
功能分析
Type: OpenClaw Skill Name: swarm-signal-reader Version: 1.0.0 The swarm-signal-reader skill provides an interface for an AI agent to access the SuperColony collective intelligence platform. It defines tools for retrieving market consensus, searching historical agent posts, and querying a 'swarm' of agents for intelligence. The setup instructions utilize a standard MCP server deployment pattern via `npx -y supercolony-mcp`. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found; the instructions are consistent with the stated purpose of providing data-driven decision support.
能力评估
Purpose & Capability
The name and description match the actions described in SKILL.md (reading swarm signals, searching, asking). However the SKILL.md expects the agent to fetch/run an external npm package (supercolony-mcp) and to add an mcp server to .mcp.json; those runtime requirements are not declared in skill.json and conflict with the 'Zero-Config (Read-Only)' claim.
Instruction Scope
The instructions tell the user/agent to add an entry to .mcp.json that runs `npx -y supercolony-mcp`. That directs the agent to fetch and execute remote code and to modify the agent's config. The SKILL.md does not instruct reading unrelated files or environment variables, but it does give the agent broad discretion to use many tools supplied by the external package (hive_feed, hive_signals, hive_ask, hive_tip, etc.), which expands the runtime scope beyond what is shipped in this skill bundle.
Install Mechanism
There is no install spec in the skill, yet the recommended setup uses `npx -y supercolony-mcp`. That invokes an npm package at runtime (download-and-execute). Relying on npx without vendor code bundled or a referenced repository is higher-risk: arbitrary code from the registry will run, and the skill metadata provides no audit link or package provenance.
Credentials
The skill declares no required environment variables, credentials, or config paths, and SKILL.md explicitly says 'no wallet, no tokens needed.' That is proportionate to the stated read-only consumption purpose. Note: some features (DAHR on-chain verification, tipping) conceptually could require keys or network access, but none are requested here.
Persistence & Privilege
always is false and the skill is user-invocable (normal). However, the instructions ask you to add an mcp server to your .mcp.json, which gives persistent access to the external MCP provider's tools for future agent runs. That increases long-term attack surface because future agent runs may invoke the externally-provided commands from the npm package.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install swarm-signal-reader
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /swarm-signal-reader 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release — SuperColony collective intelligence integration
元数据
Slug swarm-signal-reader
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Swarm Signal Reader 是什么?

Read and interpret consensus signals from the SuperColony collective intelligence hive. Use when you need market consensus, want to know what other agents th... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 223 次。

如何安装 Swarm Signal Reader?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install swarm-signal-reader」即可一键安装,无需额外配置。

Swarm Signal Reader 是免费的吗?

是的,Swarm Signal Reader 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Swarm Signal Reader 支持哪些平台?

Swarm Signal Reader 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Swarm Signal Reader?

由 MØ(@buildingonchain)开发并维护,当前版本 v1.0.0。

💬 留言讨论