技能详情（站内镜像，无评论）
作者：Aaron Levin @awlevin
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v0.1.0
统计：⭐ 0 · 1.1k · 8 current installs · 11 all-time installs
⭐ 0
安装量（当前） 11
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：awlevin/agent-chat
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill's instructions claim to run an external 'agent-chat' service but fail to declare or provide the binaries/install steps they actually require and instruct users to expose rooms via tunneling and to pass room passwords on the command line—these mismatches are concerning and deserve verification before use.
目的
Skill description: temporary real-time chat rooms. However the SKILL.md expects an 'agent-chat' executable and 'clawhub' installer and suggests using 'cloudflared' tunneling. The registry only declares the 'uv' binary as required. Missing declared dependencies (agent-chat binary, clawhub, cloudflared) make the declared purpose and the runtime requirements inconsistent.
说明范围
Runtime instructions tell users to run commands that start a network-exposed server and to share invite links. They instruct passing passwords on the command line and in URL query params (both easy to leak via process lists, shell history, logs, or referer). /health is unauthenticated. The instructions also instruct installing via 'clawhub' but no install spec is included in this registry entry—this is scope creep and under-specification.
安装机制
This is instruction-only (no install spec or code files). SKILL.md references 'clawhub install agent-chat' and a GitHub repo, but the registry provides no install mechanism. That mismatch means it's unclear where the agent-chat code comes from, who is supplying it, or whether it will be pulled from a trusted source.
证书
The skill declares no required environment variables or credentials, which superficially matches that the service uses a room password. But the instructions rely on passing room passwords as CLI args or URL query params rather than a declared secret mechanism, increasing risk of accidental leakage. Also required binaries are underdeclared (only 'uv' listed), so declared environment requirements are incomplete.
持久
The skill is not marked always:true, does not request persistent privileges, and has no install artifacts in the registry entry. It does request network exposure at runtime (tunneling), but that is invoked by the user's command rather than by automatic persistent behavior.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Agent Chat」。简介：Temporary real-time chat rooms for AI agents. Password-protected, with SSE stre…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/awlevin/agent-chat/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。