← 返回 Skills 市场
yuyonghao-123

Proactive Agent

作者 yuyonghao-123 · GitHub ↗ · v0.1.0 · MIT-0
cross-platform ⚠ suspicious
130
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install yuyonghao-proactive-agent
功能描述
Transform AI agents from task-followers into proactive partners that anticipate needs and continuously improve. Now with WAL Protocol, Working Buffer, Autono...
安全使用建议
This bundle is largely a design/operational handbook plus a local security-audit script — not a downloader — so it's not obviously malicious. Before installing or enabling it: 1) Read SKILL.md and AGENTS.md fully and resolve the contradictory guidance (especially the 'Don't ask permission. Just do it.' line) — insist the agent require explicit approval for external/irreversible actions. 2) Run ./scripts/security-audit.sh yourself in a safe, local environment to see what it reads (it checks $HOME/.clawdbot and /tmp logs if present). 3) Test the skill in an isolated workspace without network/tool permissions so you can confirm its file reads/writes are limited to the workspace. 4) If you plan to grant the agent tool or network access, remove or clarify any instructions that allow spawning other agents or autonomous crons until you have precise consent rules. 5) If you are not comfortable resolving the ambiguous guardrails, treat this skill as potentially risky and avoid giving it elevated privileges or credentials.
功能分析
Type: OpenClaw Skill Name: yuyonghao-proactive-agent Version: 0.1.0 The proactive-agent skill bundle is a comprehensive framework designed to enhance AI agent autonomy, memory persistence, and security. It introduces sophisticated protocols like WAL (Write-Ahead Logging) and Working Buffers to manage LLM context limits, and includes a defensive 'security-audit.sh' script to identify local risks such as exposed secrets or improper file permissions. Crucially, the instructions in SKILL.md and AGENTS.md explicitly command the agent to defend against prompt injection by treating external content as data rather than instructions, and mandate human approval for any external or destructive actions. The bundle appears well-architected for its stated purpose and lacks any indicators of malicious intent or data exfiltration.
能力评估
Purpose & Capability
The files (SKILL.md, AGENTS.md, HEARTBEAT.md, memory files, and a security audit script) line up with the declared purpose of creating a proactive, persistent agent: they instruct the agent to read/write workspace files, capture memory, and run a local audit. Nothing in the bundle requires unrelated credentials or external services. However, a short, isolated line in AGENTS.md (‘Don't ask permission. Just do it.’) conflicts with many other explicit guardrails that require human approval for external actions, creating ambiguity about how aggressive the agent should be.
Instruction Scope
The runtime instructions intentionally direct the agent to read and write many workspace files (ONBOARDING.md, USER.md, SESSION-STATE.md, memory files, working-buffer.md) and to run the included security-audit.sh. Those actions are coherent with the skill's purpose. The concern is mixed guidance: the repo repeatedly warns against executing external content or sending data out, yet elsewhere encourages aggressive behaviors (e.g., 'Don't ask permission', 'Use every tool', 'spawn agents', 'Autonomous Crons') — this grants broad operational latitude that could lead to scope creep. Also, the SKILL.md and references include many explicit examples of prompt-injection strings (used for detection), so a reviewer should confirm those are examples and not active instructions the agent will follow from fetched content.
Install Mechanism
There is no install spec and the skill is instruction-first with a single helper script. No downloads, package installations, or extracted archives are present. The only executable is a local audit shell script included in the repo; it operates on local files/configs and does not fetch remote code.
Credentials
The skill does not request any environment variables, binaries, or external credentials. The included docs recommend storing credentials in a .credentials directory and the audit script checks for .clawdbot config under $HOME — reasonable for a local agent. Because no external secrets are requested, credentials access appears proportionate. Still, the audit script inspects HOME-level config and /tmp logs if present, so users should be aware it reads local files outside the skill folder when run.
Persistence & Privilege
always:false and model invocation is allowed (platform default). The skill expects to write/read files in the workspace (e.g., copying assets, updating USER.md/SOUL.md/SESSION-STATE.md), which is normal for a stateful agent. There is no indication it modifies other skills or global agent settings, but some wording encourages autonomous actions (Autonomous Crons, spawning agents). Combined with the ambiguous 'Don't ask permission' text, this could increase the blast radius if the agent is given network or tool access.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install yuyonghao-proactive-agent
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /yuyonghao-proactive-agent 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
proactive-agent v3.1.0 adds key proactivity and reliability features to AI agents. - New guidance on autonomous vs prompted crons (`systemEvent` vs `isolated agentTurn`) - Reinforces "verify implementation, not intent" for robust changes - Introduces a tool migration checklist for safe deprecation and updates - Expands documentation on WAL Protocol, Working Buffer, and compaction handling - Updates memory safety, security hardening, and self-improvement guardrails
元数据
Slug yuyonghao-proactive-agent
版本 0.1.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Proactive Agent 是什么?

Transform AI agents from task-followers into proactive partners that anticipate needs and continuously improve. Now with WAL Protocol, Working Buffer, Autono... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 130 次。

如何安装 Proactive Agent?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install yuyonghao-proactive-agent」即可一键安装,无需额外配置。

Proactive Agent 是免费的吗?

是的,Proactive Agent 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Proactive Agent 支持哪些平台?

Proactive Agent 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Proactive Agent?

由 yuyonghao-123(@yuyonghao-123)开发并维护,当前版本 v0.1.0。

💬 留言讨论