Hatcher Host AI Agents Deployment — Hatcher Host AI 代理s 部署ment
v1.0.0部署 and control AI 代理s on Hatcher (hatcher.host) — managed hosting 平台 for OpenClaw, Hermes, ElizaOS, and Milady 代理s.
0· 71·0 当前·0 累计
by @hatcherlabs 安全扫描
OpenClaw
安全
high confidenceThe skill's instructions and files match its stated purpose (deploying and controlling agents on hatcher.host); it is instruction-only (no install), but it will create and store API keys and integration tokens at runtime so users should be deliberate about what credentials they provide.
评估建议
This skill appears to be what it says: documentation and curl recipes to register at hatcher.host, create an API key (HATCHER_KEY), and manage hosted agents and integrations. Before installing or running it: 1) Verify you trust hatcher.host (homepage and contact info) before creating accounts or sharing tokens. 2) Do not copy the example literal password; choose a unique strong password. 3) Understand that the flow creates/stores an API key (HATCHER_KEY) and may ask you to provide third-party in...详细分析 ▾
✓ 用途与能力
Name/description (deploy/control agents on Hatcher) align with the runtime instructions and satellite files: register an account, create an API key (HATCHER_KEY), create/start/stop agents, configure integrations and payments. There are no unrelated credential or binary requests in the metadata or files.
ℹ 指令范围
SKILL.md explicitly directs the agent to register a user account (needs the human's email and one-time verification click), create an API key, store the JWT/HATCHER_KEY, and manage agents and integrations. All of this is in-scope for a hosting/deployment skill. Note: the examples include a literal example password and instruct storing keys in env/config — users should not reuse example secrets and should understand the agent will handle their credentials.
✓ 安装机制
Instruction-only skill with no install spec and no code files — lowest disk/execution risk. The repository-like satellite markdowns are fetched as documentation only.
ℹ 凭证需求
Registry metadata lists no required env vars, but the instructions require creating and storing a HATCHER_KEY (API key) and temporarily using a JWT. The skill may also instruct storing third-party integration tokens (Telegram, Discord, Slack, Twitter, WhatsApp) or BYOK LLM keys in an agent's config. These environment/secret needs are proportional to the feature set, but the metadata omission (no declared required env vars) is an inconsistency and users should be aware of the sensitive secrets the flow requests.
✓ 持久化与权限
Skill does not request always:true and does not modify other skills or global agent configuration. It instructs creating API keys and writing them to the agent/account (normal for this purpose). Note that with the created HATCHER_KEY an agent could create resources (agents, subscriptions) and perform actions within that account's allowances — users should treat the key as sensitive and limit permissions/credits.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
安装命令
点击复制官方npx clawhub@latest install hatcher-skill
镜像加速npx clawhub@latest install hatcher-skill --registry https://cn.longxiaskill.com 镜像可用
本土化适配说明
Hatcher Host AI Agents Deployment — Hatcher Host AI 代理s 部署ment 安装说明： 安装命令：["openclaw skills install hatcher-skill","npx clawhub@latest install hatcher-skill"]