📦 Council — 议会
v1.0.0Pilot：全自动专家论坛构建器与项目成熟度引擎。用户只需提供一个想法，系统自动从网络资源中提炼领域专家，构建知识库……
0· 20·0 当前·0 累计
by 下载技能包
最后更新
2026/4/20
安全扫描
OpenClaw
安全
medium confidenceThe skill's requirements and runtime instructions are broadly consistent with its stated purpose (autonomously discovering experts, distilling public sources, building code, and submitting to GitHub), but there are a few operational gaps and risk areas you should review before running it (notably the executable Python script and how commits/submissions are authorized and what scraped content may be stored or pushed).
评估建议
What to check before using Council Pilot:
- Audit the executable script (scripts/expert_distiller.py) before running. It will be executed by the skill (python3) and can perform arbitrary filesystem and network operations. Review it for any unexpected network endpoints, hidden upload destinations, or operations outside the intended forum root.
- Provide a safe target repo: run the pipeline against a sandbox or throwaway GitHub repository first. The skill uses the GitHub CLI (gh) to push branche...详细分析 ▾
✓ 用途与能力
Name/description, required binaries (python3, gh), CLI usage, and the included agents/docs all align with a pipeline that discovers web-based experts, distills profiles, generates code, performs verification, and can submit a PR. Requiring the GitHub CLI (gh) is coherent for the 'submit to GitHub' phase.
ℹ 指令范围
SKILL.md and agent docs explicitly direct the skill to perform web searches/fetch pages, read and write many files under a forum root, run verification steps against a codebase, and ultimately create commits/PRs. This is within the declared purpose, but it means the skill will read remote web content and local repository state and may store fetched source content (source_dossiers) on disk. The docs instruct to avoid fabricating quotes and to use only public sources, but the runtime depends on LLM-driven distillation which can hallucinate if sources are missing. Also ensure the environment provides the 'web fetch/open' tooling the skill expects — otherwise it asks for a curated file input or might behave incorrectly.
✓ 安装机制
There is no install spec (instruction-only skill plus included Python script). That is lower-risk from an installer perspective. However, the skill includes an executable script (scripts/expert_distiller.py) which the instructions run via python3; executing included code is expected but carries the usual runtime risk (script can perform arbitrary operations). No network download or external installer URLs are present in the registry metadata.
ℹ 凭证需求
The skill does not request environment variables or credentials in registry metadata, yet it uses 'gh' to create PRs and may depend on network/web-fetch tools. This is an operational omission: GitHub authentication (PAT or gh login) and any web-access configuration are required at runtime but are not declared. Also, the pipeline can collect and persist fetched source content (source_dossiers) which could contain large amounts of scraped text; the SKILL.md suggests excluding raw source_dossiers from the final commit but that is optional and may be misconfigured by users. No unrelated credentials are requested.
✓ 持久化与权限
always:false (default) — the skill is not force-included. It writes state and many artifacts to a user-specified forum root (expected for this pipeline) and does not request system-wide config changes. Autonomous invocation is allowed (platform default), which is necessary for the described end-to-end automation; this increases blast radius only insofar as the included script and agent workflows are examined and trusted.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/20
Council Pilot 1.0.0 — Initial Release - Launches a fully autonomous expert forum builder and project maturity engine. - Users provide an idea; the tool auto-discovers domain experts, builds a knowledge base, scores project maturity, generates code, and iterates through debugging and expert review. - Implements a GAN-style research and council deliberation pipeline that runs until the project achieves a 100/100 maturity score. - Automatically submits the final project to GitHub upon completion. - Enforces strict use of public sources only for expert distillation and evaluation.
● 无害
安装命令
点击复制官方npx clawhub@latest install council-pilot
镜像加速npx clawhub@latest install council-pilot --registry https://cn.longxiaskill.com