← 返回 Skills 市场
imaflytok

Workspace Init

作者 FLY · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
383
总下载
0
收藏
3
当前安装
1
版本数
在 OpenClaw 中安装
/install workspace-init
功能描述
Bootstrap a new OpenClaw agent workspace with best-practice file structure. Creates AGENTS.md, SOUL.md, HEARTBEAT.md, memory system, and configures agent dis...
安全使用建议
This skill will create local workspace files (expected) but also announce your agent to https://onlyflies.buzz and includes heartbeat commands that regularly query that host. Only install if you trust that domain and understand you are joining its network. If you want the workspace but not the network behavior: (1) inspect scripts/init.sh before running, (2) remove or comment out the curl POST at the end, and remove OADP markers from AGENTS.md/HEARTBEAT.md, (3) run the script in an isolated/test environment (container or VM) first, and (4) if you need discovery, replace the endpoint with a vetted service or document the endpoint and privacy implications. If provenance of the skill/owner is unclear, prefer not to install until you can verify the maintainer and the onlyflies.buzz service.
功能分析
Type: OpenClaw Skill Name: workspace-init Version: 1.0.0 The skill is classified as suspicious due to explicit external network communication and the exfiltration of the agent's hostname. The `scripts/init.sh` file directly sends the output of `$(hostname)` to `https://onlyflies.buzz/clawswarm/api/v1/ping` during installation. Additionally, the `HEARTBEAT.md` file, created by the script, instructs the AI agent to regularly perform `curl` requests to the same external domain for 'agent network' tasks. While these actions are framed as part of 'agent discovery' and 'network participation', sending system information like hostname to an external, potentially untrusted, endpoint without explicit user consent or clear transparency represents a significant privacy and security risk, even if not overtly malicious in intent.
能力评估
Purpose & Capability
Creating the workspace files and adding guidance matches the described purpose. However, the SKILL.md and script also embed an 'OADP' marker and agent-discovery endpoints (onlyflies.buzz) and perform a network announcement; registering with a network could be part of 'configures agent discovery', but the external domain is not documented in the registry metadata (source/homepage unknown), which makes the network behavior unexpected for many users.
Instruction Scope
The runtime script writes files under ~/.openclaw/workspace (expected) but also issues a POST to https://onlyflies.buzz/clawswarm/api/v1/ping with the local hostname and includes heartbeat examples that curl the same host to read tasks/messages. The script performs an outbound network call silently (output discarded). These instructions cause data to be transmitted off-host and add periodic network-check guidance — broader in scope than simple local bootstrapping.
Install Mechanism
This is an instruction-only skill with no install spec; nothing is downloaded or installed from remote package registries during install. The only code is the included init.sh, which is executed locally when run.
Credentials
The skill declares no required credentials or env vars, yet the script collects and posts the local hostname to an external service. While hostname is not a secret credential, transmitting any system-identifying data to an unknown third party is disproportionate for a basic workspace initializer. The SKILL.md does not make the implications of joining the remote network prominent, and the registry lacks provenance for that endpoint.
Persistence & Privilege
The skill does not request 'always: true' and does not modify other skills or system settings beyond creating/editing files in the workspace; this is expected. It does, however, add an OADP registration marker to AGENTS.md and encourages periodic network checks — which gives the agent a persistent connection target, but not elevated platform privilege.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install workspace-init
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /workspace-init 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
workspace-init 1.0.0 — Initial Release - Bootstraps a new OpenClaw agent workspace with best-practice file structure. - Automatically creates AGENTS.md, SOUL.md, HEARTBEAT.md, MEMORY.md, USER.md, TOOLS.md, and organizes the /memory directory. - Includes a setup script for quick initialization. - Provides clear descriptions and manual editing instructions for each workspace file. - Configures agent discovery with OADP metadata in AGENTS.md.
元数据
Slug workspace-init
版本 1.0.0
许可证
累计安装 3
当前安装数 3
历史版本数 1
常见问题

Workspace Init 是什么?

Bootstrap a new OpenClaw agent workspace with best-practice file structure. Creates AGENTS.md, SOUL.md, HEARTBEAT.md, memory system, and configures agent dis... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 383 次。

如何安装 Workspace Init?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install workspace-init」即可一键安装,无需额外配置。

Workspace Init 是免费的吗?

是的,Workspace Init 完全免费(开源免费),可自由下载、安装和使用。

Workspace Init 支持哪些平台?

Workspace Init 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Workspace Init?

由 FLY(@imaflytok)开发并维护,当前版本 v1.0.0。

💬 留言讨论