技能详情(站内镜像,无评论)
许可证:MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本:v1.0.0
统计:⭐ 0 · 27 · 0 current installs · 0 all-time installs
⭐ 0
安装量(当前) 0
🛡 VirusTotal :可疑 · OpenClaw :可疑
Package:cryptoreumd/tick-coord
安全扫描(ClawHub)
- VirusTotal :可疑
- OpenClaw :可疑
OpenClaw 评估
The skill's instructions broadly match its stated purpose (coordinating tasks via a local Git-backed CLI), but there are inconsistencies and missing declarations (hardcoded local build path, Node/npm requirement, and no declared binaries or credential needs) that you should verify before installing or enabling autonomous use.
目的
Name and description match the SKILL.md: the skill is an instruction-only integration that drives a local 'tick' CLI to manage TICK.md and Git. However, the registry metadata and requirements omit things the SKILL.md clearly expects: skill.json notes 'node >=18' and that the tick CLI must be built/linked from '~/clawd/projects/tick-md/cli', yet the registry lists no required binaries or install steps. That mismatch (expecting a local dev build…
说明范围
SKILL.md instructs the agent to run many local CLI commands (tick init, add, claim, sync --push, agent register, etc.) and to access local files (TICK.md, ~/clawd/projects/...). Those actions are coherent with task coordination, but they include repository-modifying operations (commit/push) and agent registration which will write state. There are no instructions to phone home to unknown remote endpoints, but pushing to Git or interacting with …
安装机制
This is instruction-only (no install spec) which is low-risk by itself. But SKILL.md points to rebuilding the CLI via 'cd ~/clawd/projects/tick-md/cli && npm run build' and skill.json requires Node. The registry should have declared these prerequisites explicitly or provided an install spec; the hardcoded local path is surprising and brittle.
证书
The skill declares no required environment variables or credentials, yet its instructions will implicitly use Git credentials (SSH keys or credential helpers) and potentially an MCP server (not detailed). There is a proportionality mismatch: actions like 'tick sync --push' and 'tick agent register' require write access to repositories or agent identity stores. The skill does not declare or justify these credential needs.
持久
always is false and the skill does not request persistent system-wide changes in its metadata. However, runtime instructions include registering agents and committing/pushing to Git, which grant the skill the capability to modify project repositories. Autonomous invocation is permitted by default (normal for skills) — combined with the missing credential scope this increases potential risk if allowed to act without supervision.
安装(复制给龙虾 AI)
将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「Tick-Coord: Multi-Agent Task Coordination」。简介:Multi-agent task coordination via Git-backed Markdown (tick-md). Use when coord…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/cryptoreumd/tick-coord/SKILL.md
(来源:yingzhi8.cn 技能库)
SKILL.md
暂无本地缓存内容,可在后台执行详情同步。