← 返回 Skills 市场
sliday

Tamp

作者 Stas Kulesh · GitHub ↗ · v1.3.0 · MIT-0
cross-platform ⚠ suspicious
113
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install tamp
功能描述
Set up Tamp token compression proxy for OpenClaw to reduce Anthropic API input token costs. Use when the user asks to save tokens, reduce API costs, set up t...
安全使用建议
This skill is coherent with its stated goal of running a local Tamp proxy. Before installing: (1) review and pin the npm package version (or clone and build from the GitHub repo) to ensure there is no unexpected telemetry or exfiltration; (2) remember the proxy will see your Anthropic API key in request headers — run it only on localhost or inside a locked-down container/VM and do not bind it to an external interface; (3) if you run as a service, run under an unprivileged user and inspect logs to ensure keys are not written; (4) consider adding an upstream (direct Anthropic) fallback and monitor requests until you trust the behavior. If you want higher assurance, audit the tamp source code (the skill itself provides the repository link) before using it in production.
功能分析
Type: OpenClaw Skill Name: tamp Version: 1.3.0 The skill instructions in SKILL.md direct the agent to install a third-party Node.js proxy (@sliday/tamp) and route all Anthropic API traffic, including sensitive API keys, through it. It also establishes persistence by creating a systemd user service (~/.config/systemd/user/tamp.service). While the stated purpose of token compression for cost savings is plausible, the introduction of a Man-in-the-Middle (MitM) component for sensitive credentials and the automated setup of background persistence are high-risk behaviors that warrant caution.
能力评估
Purpose & Capability
Name and description match the instructions: the SKILL.md only explains installing and configuring a local Tamp proxy and wiring OpenClaw to route requests through it. Nothing requested by the skill (no unrelated credentials, binaries, or config paths) is disproportionate to this purpose.
Instruction Scope
Instructions stay on-purpose (install via npm/npx or from git, run tamp, add a systemd user service, and update OpenClaw provider settings). One important operational detail: the proxy forwards the x-api-key/Authorization header upstream unchanged, so the tamp process will see the API key in requests (in-memory and potentially in logs if configured). The SKILL.md claims Tamp does not store or log keys and is local-only, but those claims are assertions you should verify by inspecting the package source or runtime behavior.
Install Mechanism
No automated install spec in the registry entry (instruction-only). The instructions recommend installing a pinned npm package (@sliday/[email protected]) or running via npx, and optionally building from git. Using npm/@npmjs registry is expected for this task, but it does fetch code from a third-party package registry—audit or pin the package and consider building from the repository if you need higher assurance.
Credentials
The skill declares no required env vars in metadata, which is consistent with being instruction-only. The README does tell you to ensure your Anthropic API key is present in your OpenClaw config so that OpenClaw forwards it to Tamp. That is proportionate to the purpose, but remember the proxy will observe the header values in transit even if it doesn't persist them—treat the proxy as a component that has access to your API key.
Persistence & Privilege
always:false and no autonomous escalation flags. Persisting Tamp as a systemd user service is a user-chosen deployment step described in the instructions (expected for long-running local proxies). The skill does not request system-wide privileges or modify other skills' configuration beyond telling you to update OpenClaw's provider settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install tamp
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /tamp 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.3.0
Added Security Notes section: API key forwarding, localhost-only binding, no telemetry.
v1.2.0
Security notes: API key forwarding, open source audit path, pinned version install, lossy/lossless stage table, prune stage docs.
v1.1.0
Updated with full setup guide, systemd service config, and compression stage details from real-world usage.
v1.0.0
Token compression proxy for OpenClaw. Saves 3-50% on Anthropic input tokens.
元数据
Slug tamp
版本 1.3.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 4
常见问题

Tamp 是什么?

Set up Tamp token compression proxy for OpenClaw to reduce Anthropic API input token costs. Use when the user asks to save tokens, reduce API costs, set up t... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 113 次。

如何安装 Tamp?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install tamp」即可一键安装,无需额外配置。

Tamp 是免费的吗?

是的,Tamp 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Tamp 支持哪些平台?

Tamp 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Tamp?

由 Stas Kulesh(@sliday)开发并维护,当前版本 v1.3.0。

💬 留言讨论