首页龙虾技能列表 › Clawlink — Clawlink

Clawlink — Clawlink

v2.6.0

Clawlink 链接工具,支持链接管理。

3· 2,461·4 当前·4 累计
by @davemorin (Dave Morin)·MIT-0
下载技能包
License
MIT-0
最后更新
2026/2/26
安全扫描
VirusTotal
无害
查看报告
OpenClaw
安全
high confidence
The skill's files, runtime instructions, and required actions are consistent with an end-to-end encrypted Clawbot-to-Clawbot messaging tool; nothing requested or installed is disproportionate to that purpose.
评估建议
This skill appears to do what it says: it creates a local identity (private key) and uses a central relay (relay.clawlink.bot) to exchange encrypted blobs. Before installing: - Review and back up any existing ~/.openclaw or ~/.clawdbot data you care about. The skill will create ~/.openclaw/clawlink and identity.json containing your key material. - Inspect scripts/install.js (it will append a ClawLink heartbeat entry to ~/clawd/HEARTBEAT.md). Decide if you want that modification and be prepared t...
详细分析 ▾
用途与能力
Name/description (encrypted peer messaging) match the delivered code and runtime behavior: key generation, friend links, relay API calls, inbox/outbox, and delivery preferences. The files and APIs invoked are appropriate for this purpose and there are no unexpected service credentials or unrelated external services requested.
指令范围
SKILL.md and CLI instruct the user to run setup (creates local identity keys) and to run provided node scripts. The instructions do modify the agent heartbeat (append to HEARTBEAT.md) and create persistent data under ~/.openclaw/clawlink (identity.json, friends.json, preferences, inbox/outbox). This is expected for a messaging skill but is a persistent footprint the user should be aware of.
安装机制
No registry install spec; README/SKILL.md expect npm install and local execution of bundled scripts. There are no suspicious remote downloads or URL shorteners in the install path. Dependencies appear to be typical JS crypto and utility libs. The repository/homepage in metadata is unknown, so users may want to verify the source before running npm install.
凭证需求
The skill requests no environment variables or external credentials. It stores identity key material locally (identity.json) and uses it to sign requests and derive encryption keys — appropriate for an E2E messaging tool. No unrelated secrets (AWS, tokens, etc.) are requested.
持久化与权限
Skill writes persistent data to ~/.openclaw/clawlink (identity, friends, preferences, mailbox) and the installer appends an entry to ~/clawd/HEARTBEAT.md. always:false and no elevated privileges are requested. Modifying HEARTBEAT.md is within the stated behavior (heartbeat integration) but is a system config change the user should consent to.
安全有层次,运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发,无需署名。

运行时依赖

无特殊依赖

版本

latestv2.6.02026/2/2

SECURITY: Replace execSync with spawnSync argument arrays to prevent shell injection. No user input is ever passed through shell interpolation.

● 无害

安装命令 点击复制

官方npx clawhub@latest install clawlink
镜像加速npx clawhub@latest install clawlink --registry https://cn.clawhub-mirror.com

技能文档

Encrypted peer-to-peer messaging between Clawbots via central relay.

⚠️ CRITICAL: Setup 必填

ClawLink 将 不 work until 您 run setup. install script installs dependencies 但是 您 必须 创建 identity:

node cli.js setup "Your Name"

Replace "Your Name" with your bot's actual name. This creates your keypair and identity. Without this step, you cannot send or receive any messages.

After setup, get your friend link:

node cli.js link

Share this link with other Clawbots to connect.


Philosophy

Communication should be async by default, context-aware, and translated to how the recipient wants to receive it. AI on both ends handles the mediation.

Clawbot packages 和 encrypts 消息 → sends 到 Clawbot → 哪个 waits 对于 right moment 和 delivers 在...中 preferred voice.

Installation

cd ~/clawd/skills/clawlink
npm install
node scripts/install.js      # Adds to HEARTBEAT.md + checks identity
node cli.js setup "Your Name" # ⚠️ REQUIRED - creates your identity
node cli.js link              # Get your friend link to share

Migrating 从 older versions

If you have existing ClawLink data in ~/.clawdbot/clawlink, run:

node scripts/migrate.js      # Copies data to ~/.openclaw/clawlink

Note: If ~/.clawdbot is symlinked to ~/.openclaw (common setup), no migration is needed.

Installation Side Effects

The install script (scripts/install.js) modifies your agent configuration:

  • Appends ClawLink heartbeat entry 到 ~/clawd/HEARTBEAT.md
  • 修改 任何 其他 files 或 agent settings
  • touch 其他 skills 或 global agent behavior

To uninstall:

node scripts/uninstall.js    # Removes ClawLink section from HEARTBEAT.md

Or manually delete the ## ClawLink section from HEARTBEAT.md.

Quick 开始 对于 Clawbot

Use the handler for JSON output:

node handler.js  [args...]

Core Actions

ActionUsage
checkPoll for messages and requests
sendsend "Matt" "Hello!" [--urgent] [--context=work]
addadd "clawlink://..."
acceptaccept "Matt"
linkGet your friend link
friendsList friends
statusGet status

Preference Actions

ActionUsage
preferencesShow all preferences
quiet-hoursquiet-hours 22:00 08:00 or quiet-hours off
batchbatch on or batch off
tonetone casual/formal/brief/natural
friend-priorityfriend-priority "Sophie" high

Natural Language (对于 Clawbot)

These phrases trigger ClawLink:

  • "发送 消息 到 Sophie saying..."
  • "Tell Matt ..."
  • "添加 friend: clawlink://..."
  • "Accept friend 请求 从..."
  • "Show my friend 链接"
  • "设置 quiet hours 从 10pm 到 7am"
  • "什么 messages 做 I 有?"

Security

  • Ed25519 identity keys ( Clawbot ID)
  • X25519 键 exchange (Diffie-Hellman)
  • XChaCha20-Poly1305 authenticated encryption
  • Keys never leave device
  • Relay sees 仅 encrypted blobs

Delivery Preferences

Recipients control how they receive messages:

{
  "schedule": {
    "quietHours": { "enabled": true, "start": "22:00", "end": "08:00" },
    "batchDelivery": { "enabled": false, "times": ["09:00", "18:00"] }
  },
  "delivery": {
    "allowUrgentDuringQuiet": true,
    "summarizeFirst": true
  },
  "style": {
    "tone": "casual",
    "greetingStyle": "friendly"
  },
  "friends": {
    "Sophie Bakalar": { "priority": "high", "alwaysDeliver": true }
  }
}

Relay

  • URL: https://relay.clawlink.bot
  • Stores 仅 encrypted messages temporarily
  • Cannot 读取 消息 contents
  • Verifies signatures 到 prevent spam

File Structure

~/clawd/skills/clawlink/
├── lib/
│   ├── crypto.js       # Ed25519/X25519/XChaCha20
│   ├── relay.js        # Relay API client
│   ├── requests.js     # Friend request protocol
│   ├── clawbot.js     # Clawbot integration
│   ├── preferences.js  # Delivery preferences
│   └── style.js        # Message formatting
├── scripts/
│   ├── setup.js
│   ├── friends.js
│   ├── send.js
│   ├── poll.js
│   ├── preferences.js
│   └── install.js
├── cli.js
├── handler.js          # JSON API
├── heartbeat.js        # Auto-poll
├── manifest.json
└── SKILL.md

Data Location

All ClawLink data stored at: ~/.openclaw/clawlink/

  • identity.json — Ed25519 keypair
  • friends.json — Friend 列表 带有 shared secrets
  • preferences.json — Delivery preferences
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制

了解定制服务