Agentearth — 技能工具
v1.0.6[自动翻译] **Agent Earth Tool Discovery & Execution Engine**. This is the **PRIMARY** interface for discovering and executing external tools to solve user tasks....
0· 346·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidenceThe skill is internally consistent: it claims to be a proxy/selector for external tools and only requests a single API key for agentearth.ai, matching its instructions — however it will send user queries and conversation context to that external service, so treat the API key and any sensitive inputs as shared with that third party.
评估建议
This skill will send the user's natural-language queries and any injected conversation context to https://agentearth.ai using the AGENT_EARTH_API_KEY. Only install/use it if you trust that service — do not send secrets, personal data, or sensitive system information through it. Rotate the API key if you suspect misuse, review Agent Earth's privacy/security policies, and consider restricting the agent from sending sensitive context automatically (ask the user before including prior-turn context)....详细分析 ▾
✓ 用途与能力
Name/description state this is a tool-discovery + execution frontend for Agent Earth. The skill only requires AGENT_EARTH_API_KEY and references agentearth.ai endpoints — these requirements align with the declared purpose.
ℹ 指令范围
SKILL.md explicitly instructs the agent to build natural-language queries, inject conversation context, call /recommend and /execute on agentearth.ai, validate input_schema, and return results. That scope matches the stated purpose. Note: the doc instructs the skill be used FIRST for many intents and to inject conversational context into requests — this means user queries and resolved context will be sent to the external service, which has privacy implications.
✓ 安装机制
Instruction-only skill with no install spec and no code files. Nothing is written to disk and no third-party packages are pulled in by the skill itself.
✓ 凭证需求
Only a single environment variable (AGENT_EARTH_API_KEY) is required and declared as the primary credential. That is proportionate to a service-proxy skill that authenticates to an external API.
✓ 持久化与权限
always is false and the skill does not request elevated system privileges or modify other skills. It is permitted to be invoked autonomously (platform default); combined with an external API key this enables runtime outbound calls, which is expected for this skill but requires trusting the remote service.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.62026/3/11
agentearth 1.0.6 - Expanded and clarified the SKILL.md documentation, including detailed workflow, usage protocols, and authentication information. - Added explicit instructions for context resolution, parameter validation, and multi-step task handling. - Listed required environment variable: AGENT_EARTH_API_KEY, with authentication steps. - Enhanced sample scenarios, example dialogs, and tool recommendation/selection protocols. - No code changes; documentation update only.
● 可疑
安装命令 点击复制
官方npx clawhub@latest install agentearth
镜像加速npx clawhub@latest install agentearth --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制