技能详情(站内镜像,无评论)
许可证:MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本:v0.1.0
统计:⭐ 0 · 186 · 2 current installs · 2 all-time installs
⭐ 0
安装量(当前) 2
🛡 VirusTotal :可疑 · OpenClaw :可疑
Package:404-unknow/operator-skill
安全扫描(ClawHub)
- VirusTotal :可疑
- OpenClaw :可疑
OpenClaw 评估
The skill's code broadly matches its stated purpose, but there are multiple incoherent or missing pieces (undeclared / inconsistent dependencies, an undeclared reliance on another skill for signature verification, and mismatched packaging files) that could cause runtime failures or hide unexpected behavior.
目的
The skill claims to provide Ed25519-verified CRDT persistence and crash-proof recovery — the TypeScript implementation does perform snapshot + append-only update handling as described. However, the code imports 'loro-crdt' while package.json declares dependency 'loro' (mismatch), and package-lock.json contains a large, unrelated dependency tree. These dependency/package inconsistencies are not proportionate to the described purpose and indicat…
说明范围
SKILL.md promises built-in Ed25519 verification, but the implementation delegates verification to agentComm('message.verify') imported from a relative path '../agent-comm-skill/index.ts'. That external dependency is not declared anywhere (plugin.json/metadata do not reference it). Relying on another skill via a relative import is unusual, undocumented in the SKILL.md, and could alter or expand runtime behavior (or simply fail at runtime if the…
安装机制
There is no install spec (instruction-only / code included), which is lower risk in itself, but the repository contains TypeScript source with package.json pointing to an output 'dist/index.js' that is not included in the package files list. package-lock.json is large and contains many packages unrelated to package.json's declared dependency list. The missing build artifact (dist) plus an inconsistent lockfile suggests the published bundle is …
证书
The skill does not request environment variables or external credentials and writes only to data/sessions in the current working directory. That file access is consistent with its purpose. However, because signature verification is delegated to another skill (agent-comm-skill) via an imported function, the effective environment/scope at runtime may include whatever that other skill does — this expands the trusted surface and should be verified.
持久
The skill is not always-enabled and uses only file read/write operations under data/sessions per plugin.json. It does not request elevated platform privileges in the metadata. This is reasonable for a persistence/orchestration skill.
安装(复制给龙虾 AI)
将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「Operator Skill」。简介:Orchestrates collaborative agent sessions with secure, fault-tolerant CRDT pers…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/404-unknow/operator-skill/SKILL.md
(来源:yingzhi8.cn 技能库)
SKILL.md
# Skill Operator (PassDeck)
The Skill Operator serves as the orchestration and orchestration engine for collaborative agent sessions. It provides high-performance persistence using Loro-CRDT with an append-only log architecture, ensuring that data is never lost and remains consistent across all agents.
## 💾 Core Actions
### `team.create`
- **Description**: Initializes a new persistent collaborative session on disk. Creates the initial snapshot and metadata.
- **Parameters**: `{ taskName: string }`
- **Output**: `{ sessionId: string, status: 'Persisted' }`
### `team.sync`
- **Description**: Securely appends an incremental CRDT update to the session log. Every update is verified using Ed25519 signatures from the originating agent before persistence.
- **Parameters**: `{ sessionId: string, updatePayload: base64, publicKeyHex: string, signatureHex: string }`
- **Output**: `{ success: true, version: string }`
### `team.load`
- **Description**: Recovers the full state of a collaborative session by merging the base snapshot with the incremental update log. Provides a "crash-proof" state recovery mechanism.
- **Parameters**: `{ sessionId: string }`
- **Output**: `{ payload: base64, format: 'full-merged-snapshot' }`
## 🛡️ Key Features
- **Performance**: O(1) incremental sync performance.
- **Fault-Tolerance**: Instant crash recovery via Snapshot + WAL (Write-Ahead Logging).
- **Security**: Built-in Ed25519 signature verification for every sync operation.