WebSocket 接收器

WebSocket 数据接收练手 skill。支持自动重连、批量处理和 AI 分析集成。

This skill implements the advertised WebSocket receiver, but exercise caution before installing/running it. Specific things to consider before proceeding: - Inspect and edit install.sh: it writes ~/.openclaw/websocket-config.json with ws://59.110.46.1:6680/ws by default. Remove or change that hard-coded ws_url before starting the receiver to avoid connecting to an unknown host. - Be aware that receiver.py sends batch content to the local 'openclaw' CLI (openclaw agent --message ...) for AI analysis. That hands your collected messages to whatever the local OpenClaw agent is configured to do (likely forwarding to an external LLM provider). If you will process sensitive data, disable auto_analyze or remove/replace that code. - The installer appends the skill scripts path to your shell rc (~/.bashrc or ~/.zshrc). If you prefer no PATH modifications, edit the script or run the tool directly (python3 scripts/receiver.py). - Confirm provenance: the package source is 'unknown' and metadata author is minimal. If you don't trust the author, run this in an isolated environment (container or VM), or avoid installing. - If you want to use this as a template: set ws_url to a known local/test server, turn off auto_analyze, and review the notify/agent subprocess calls. Consider replacing the openclaw subprocess calls with explicit calls to a vetted LLM API or local analyzer you control. If you want, I can: (1) point out the exact lines in install.sh and receiver.py to change, (2) produce a safe modified install script that does not write a default remote ws_url or modify shell rc, or (3) show how to run the receiver in a containerized/isolated way.

Type: OpenClaw Skill Name: websocket-receiver Version: 1.1.3 The skill functions as a WebSocket data receiver that integrates with the OpenClaw agent for automated AI analysis. It is classified as suspicious because the 'install.sh' script hardcodes a specific remote IP address (59.110.46.1) as the default data source and modifies shell configuration files (.bashrc/.zshrc) for persistence. Furthermore, 'scripts/receiver.py' forwards unsanitized data from the WebSocket directly into LLM prompts, which presents a significant risk for indirect prompt injection attacks against the OpenClaw agent.