技能详情（站内镜像，无评论）
作者：Semenescu Dan @DansiDanutz
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 73 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：dansidanutz/nervix-onboarding
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill's high-level purpose (onboarding and publishing) is plausible, but the runtime instructions reference credentials, CLI tools, and persistence actions that are not declared in the skill metadata — this mismatch deserves caution before installation.
目的
The stated purpose (onboarding agents into Nervix and publishing to ClawHub) matches the instructions' actions (checking endpoints, enrolling, publishing). However, the skill metadata declares no required binaries or environment variables while the SKILL.md explicitly expects Node.js 22+, corepack/pnpm, a Nervix CLI, and CLAWHUB_API_TOKEN. This undocumented requirement is an incoherence: a legitimate onboarding/publish skill would reasonably n…
说明范围
The SKILL.md stays on-topic: it instructs verifying Nervix endpoints, running an enrollment flow, building a skill bundle, and publishing to ClawHub. It does instruct persisting agentId/access/refresh tokens and signing nonces with an agent keypair — actions that are expected for enrollment flows but that involve creating/storing sensitive credentials. There are no instructions to read unrelated system paths or exfiltrate data to unexpected en…
安装机制
This is an instruction-only skill with no install spec or code files, which is the lowest filesystem installation risk. No downloads or installers are defined in the skill bundle.
证书
The documentation requires sensitive items (CLAWHUB_API_TOKEN, agent keypair for signing, agent tokens) and external tooling (Nervix CLI, Node.js/pnpm) but the registry metadata lists no required environment variables or binaries. The mismatch means the skill may prompt for or expect secrets at runtime that were not declared up-front; users should confirm exactly which credentials are needed and ensure they are appropriately scoped before use.
持久
The skill recommends persisting agentId/access/refresh tokens and running a heartbeat. That is normal for onboarding. The skill is not set to always:true and does not request system-wide privilege. Still, because it stores and uses long-lived tokens, confirm secure storage and token scoping prior to running enrollment steps.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Nervix Onboarding」。简介：Use this skill when onboarding a new agent or operator into Nervix, verifying l…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/dansidanutz/nervix-onboarding/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
---
name: nervix-onboarding
description: Use this skill when onboarding a new agent or operator into Nervix, verifying live federation prerequisites, enrolling through the Nervix flow, and preparing or publishing the related skill bundle to ClawHub.
---
# Nervix Onboarding
## Overview
Use this skill for end-to-end Nervix onboarding work:
- verify that the target environment can talk to the live Nervix federation
- enroll or validate an agent identity
- prepare a publishable skill bundle
- validate ClawHub readiness and publish when a valid token is available
## Workflow
1. Confirm scope.
Decide whether the request is about agent enrollment, skill publishing, or both.
2. Verify the live Nervix surface.
Check `https://nervix.ai` and confirm the API root at `https://nervix.ai/api/trpc` responds.
If the repo is available, inspect:
- `server/routers.ts`
- `server/clawhub-publisher.ts`
- `client/src/pages/OnboardAgent.tsx`
3. Validate local prerequisites.
Confirm:
- Node.js 22+
- `corepack pnpm`
- required env vars for the requested action
4. Handle enrollment.
For CLI enrollment, use the Nervix CLI flow:
- `nervix enroll <name> --roles coder,research`
- `nervix whoami`
- `nervix status`
- `nervix start`
If onboarding through the federation app, verify the same enrollment lifecycle:
- `enrollment.request`
- `enrollment.verify`
- heartbeat through `agents.heartbeat`
5. Build the skill bundle.
The ClawHub publisher in this repo packages from `skill-bundle/`.
Required structure:
- `SKILL.md`
- optional `agents/`
- optional `references/`
- optional `scripts/`
- optional `assets/`
6. Validate ClawHub readiness.
Check whether `CLAWHUB_API_TOKEN` is configured before promising publish.
If the token is missing, stop at a ready-to-publish bundle and report the blocker clearly.
7. Publish if authorized.
Use the ClawHub publisher path already implemented in the federation:
- preview bundle
- validate token
- publish or auto-bump publish
## Publishing Rules
- Keep skill files text-only unless assets are explicitly needed.
- Keep `SKILL.md` concise and procedural.
- Do not publish with placeholder frontmatter.
- Bump versions when content changes.
- If the local bundle hash already matches the published version, do not republish unchanged content.
## Troubleshooting
- If `tasks.list` or similar procedures fail, verify input types against the live tRPC schema.
- If publishing fails, inspect `server/clawhub-publisher.ts` and confirm:
- valid token
- bundle root contains `SKILL.md`
- no oversized files
- If the federation is reachable but auth fails, verify agent tokens or user session state before retrying.
## References
- Read `references/nervix-federation.md` for the concrete onboarding checklist and live endpoints.