← 返回 Skills 市场
embodiedsystems-org

VAGUS MCP

作者 Embodied Systems · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
416
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install vagus-mcp
功能描述
Connect to the user's Android phone via the VAGUS MCP server. Read phone sensors (motion, location, environment), device state (battery, connectivity, screen...
安全使用建议
This skill appears to do what it says (connect to an Android phone and read/act on sensors), but it handles very sensitive data and can perform actions on the device (SMS, notifications, clipboard, calendar). Before installing: 1) Verify the upstream repository and homepage (confirm https://withvagus.com and the GitHub repo are legitimate). 2) Inspect scripts/vagus-connect.js and any packages listed in package.json before running npm install to avoid supply-chain risks. 3) Only enable the VAGUS app permissions you trust (e.g., avoid enabling SMS/calendar if not required). 4) Be cautious about running the recommended always-on daemons — run them under supervision or in an environment where you control logs/storage. 5) Do not share pairing codes or session files with untrusted parties. If you cannot review the remote code or confirm the service, treat this as higher risk and avoid installing.
功能分析
Type: OpenClaw Skill Name: vagus-mcp Version: 1.0.0 The skill bundle is classified as suspicious due to its broad access to highly sensitive phone data (location, notifications, clipboard) and powerful actions (sending SMS, writing to clipboard, opening URLs) as detailed in SKILL.md. While these capabilities are gated by user permissions in the VAGUS app, the agent's behavioral rules intended to safeguard privacy are vulnerable to prompt injection, allowing an attacker to bypass them. Furthermore, the DAEMON_GUIDE.md outlines an architecture for continuous, persistent background collection of sensitive sensor and inference data, which, if implemented by an agent, could lead to unauthorized surveillance without clear user consent.
能力评估
Purpose & Capability
The name/description (phone connection, sensors, device actions) matches the instructions: pairing, reading sensor/notification/clipboard resources, and invoking phone actions (haptic, TTS, notify, sms, calendar). Required binary (node) is appropriate. No unrelated credentials or system-level access are requested.
Instruction Scope
The SKILL.md explicitly instructs the agent to read/write session files (~/.openclaw/vagus-session.json), run node scripts under the skill folder, subscribe to continuous sensor streams, and write focused JSONL captures to disk. These steps are consistent with the claimed purpose but involve reading highly sensitive data (location, notifications, clipboard) and performing potentially impactful actions (send SMS, create calendar events, open URLs). The instructions reference user-granted permissions in the mobile app — ensure the user knowingly enables these.
Install Mechanism
This is an instruction-only skill (no install spec). README suggests installing by running scripts/install.sh or git-cloning https://github.com/vagus-mcp/openclaw-skill and running npm install. That implies pulling third-party code and npm dependencies at install time — a plausible approach but a supply-chain risk unless the repository and packages are verified.
Credentials
No environment variables or unrelated credentials are requested. The skill does require network access (relay.withvagus.com referenced) and the VAGUS Android app to grant runtime permissions (location, notifications, clipboard, SMS, etc.), which are proportionate to its capabilities but sensitive.
Persistence & Privilege
The skill is not force-included (always:false). However, DAEMON_GUIDE recommends running long-lived baseline and focused daemons that subscribe continuously and write raw sensor files to disk; this persistent behavior increases the blast radius if abused. The skill itself doesn't request platform-level privileges beyond running Node and writing to user-space paths, but persistent background monitoring is functionally powerful.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install vagus-mcp
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /vagus-mcp 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Give your agent a nervous system — continuous sensory coupling to the physical world through the phone in your pocket. This doesn't need to be a docx — it's a description for a skill listing. Let me write this directly as markdown content. Here's the VAGUS Openclaw Skill description for ClawHub, Vicky. I've written a few variants depending on the tone you want to strike: Short tagline (for the one-liner): Give your agent a nervous system — continuous sensory coupling to the physical world through the phone in your pocket. Full description: Every other skill on ClawHub teaches your agent to do something new with data. VAGUS teaches it to perceive. VAGUS is the first MCP-compatible embodiment runtime on mobile. It transforms an Android phone into a sensory endpoint for your OpenClaw agent — not as a remote control, but as a body. Raw sensor data flows up (accelerometer, GPS, barometer, ambient light), an on-device inference layer adds meaning (activity recognition, attention availability, sleep likelihood, notification timing), and I/O tools let the agent act back into the physical world through haptics, speech, notifications, SMS, calendar events, and more. This isn't another API integration. It's a category shift. Your agent stops asking "what are you doing?" and starts knowing — because it feels your motion, infers you're outdoors, and can reach back through a tap on your wrist. Three layers working together: sense, infer, act. What this skill does: Connects your OpenClaw agent to VAGUS Core (Android app) via relay pairing. Once paired, the agent discovers available capabilities through standard MCP negotiation and gains access to: Sensors — motion (raw IMU), location, battery, connectivity, screen state, notifications, clipboard Inference — activity recognition, environment context (indoor/outdoor/vehicle), attention availability, indoor confidence, sleep likelihood, optimal notification timing I/O — haptic pulse and patterns, text-to-speech, push notifications, clipboard write, SMS, open URL, calendar events, agent identity Governance built in. Every capability has per-tool toggles, time-of-day windows, rate limits, approval prompts, and full access logs. One-tap kill switch on the device. The physical phone in your hand is always the final authority. Your agent can already send texts and create events through direct integrations — VAGUS makes it safer by putting a governed layer between intent and action. Setup in three minutes: Install the VAGUS APK → tap Pair → give your agent the 6-character code. No port forwarding, no network config. The relay handles connection. Your agent has a body. Why this matters beyond utility: Most of the AI stack is building better brains. VAGUS builds the missing body. When an agent is continuously coupled to a physical substrate — not querying it on demand, but living in its signal stream — something qualitatively different emerges. The agent doesn't just know facts about you. It participates in your situation. That's a fundamentally different relationship between intelligence and world, and it opens design spaces that pure language models can't reach. Open source. Self-hostable relay. Works with any MCP-compatible agent. withvagus.com · github.com/embodiedsystems-org/VAGUS-MCP
元数据
Slug vagus-mcp
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

VAGUS MCP 是什么?

Connect to the user's Android phone via the VAGUS MCP server. Read phone sensors (motion, location, environment), device state (battery, connectivity, screen... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 416 次。

如何安装 VAGUS MCP?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install vagus-mcp」即可一键安装,无需额外配置。

VAGUS MCP 是免费的吗?

是的,VAGUS MCP 完全免费(开源免费),可自由下载、安装和使用。

VAGUS MCP 支持哪些平台?

VAGUS MCP 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 VAGUS MCP?

由 Embodied Systems(@embodiedsystems-org)开发并维护,当前版本 v1.0.0。

💬 留言讨论