技能详情（站内镜像，无评论）
作者：LIU @2019-02-18
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.2
统计：⭐ 0 · 109 · 1 current installs · 1 all-time installs
⭐ 0
安装量（当前） 1
🛡 VirusTotal ：良性 · OpenClaw ：良性
Package：2019-02-18/skill-feedback-collector
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：良性
OpenClaw 评估
The skill's code, install spec, and runtime instructions are consistent with a browser-based human-feedback collector; main risks come from default network exposure and history persistence rather than incoherent or hidden behavior.
目的
Name/description (human-in-the-loop feedback collector) align with the files, exported tools, and required binaries (node/npm). Dependencies (@modelcontextprotocol/sdk, ws) are appropriate for an MCP server and WebSocket UI.
说明范围
SKILL.md instructs the agent to call ask_human_feedback and set_feedback_mode only. The runtime code exposes HTTP/WebSocket endpoints, serves a browser UI, persists local conversation history, and supports auto-dequeue of queued tasks — all documented. Notable operational behavior: the server responds to auto-dequeued tasks (autoMode) which can cause the agent to continue working without manual confirmation, and the UI/API use long-polling fal…
安装机制
Install is via npm package 'skill-feedback-collector' (package.json / package-lock.json present). This is a standard registry install (moderate risk compared to no-install), and the code is included in the package here for review. No opaque remote downloads or URL-based extracts were observed.
证书
No secrets are required by default; only FEEDBACK_PORT and optional FEEDBACK_TOKEN are referenced. However FEEDBACK_TOKEN defaults to empty, and CORS is '*' — so by default the UI/API are publicly accessible if the port is reachable. Requesting no unrelated credentials is proportionate.
持久
always:false and no special platform privileges requested. The skill writes feedback-history.json into its directory and persists up to 500 entries (documented and gitignored). This local persistence is expected but means sensitive conversation content may be stored on disk and should be managed.
综合结论
This skill appears to do what it says: run a local MCP server that pauses the agent and asks for human feedback via a browser UI. Before installing or deploying, consider: 1) Run it in a network-isolated environment (or bind to localhost) if you don't want external access. By default the server/CORS allow public access and FEEDBACK_TOKEN is empty — set FEEDBACK_TOKEN and/or use a firewall to restrict access. 2) Conversation history is saved lo…
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「skill-feedback-collector」。简介：Human-in-the-loop MCP feedback collector with task queue. Pauses to collect hum…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/2019-02-18/skill-feedback-collector/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。