📦 Lobster Friends Protocol Real — P2P好友管理
v1.0.0基于P2P加密通讯的社交好友管理系统，支持好友发现、关系维护、安全聊天与本地社交图谱可视化，继承 secure-p2p-messenger 实现端到端加密。
0· 243·1 当前·1 累计
by 下载技能包
最后更新
2026/4/18
安全扫描
OpenClaw
可疑
medium confidence技能描述与所需运行工具与P2P好友管理工具相符，但包体不完整（缺少install.sh及大量引用脚本），无法验证实际执行内容，存在疑点，需进一步审查后再安装。
评估建议
暂勿运行或安装。SKILL.md列出众多脚本及install.sh，但包内缺失，导致无法验证真实行为。安装前请向发布者索取：(1) 缺失的install.sh及所有引用脚本（lobster-friends.sh、lib/*.sh等），检查其网络调用、下载及sudo命令；(2) 源码仓库或上游secure-p2p-messenger以验证来源。如必须测试，请在隔离沙箱或VM中进行，切勿在生产机用sudo运行未知安装脚本，并审查涉及网络扫描、蓝牙/WiFi操作或外部下载的脚本。技能整体与描述功能一致，但缺失文件带来不可验证风险——补齐并审查实际脚本后将重新评估。...详细分析 ▾
ℹ 用途与能力
Name/description (P2P encrypted social/friend management) aligns with required binaries (bash, jq, openssl, sqlite3) and the declared dependency on secure-p2p-messenger. Asking to install system packages (sqlite3, jq, openssl) is reasonable for the described functionality.
⚠ 指令范围
The SKILL.md instructs network scanning, broadcasting discovery signals, Bluetooth/WiFi-Direct usage and running local install and management scripts (./install.sh, lobster-friends.sh). Those actions are consistent with the stated purpose but can access the network and local storage. Critically, the runtime instructions reference many scripts and files that are not included in the package, meaning the actual runtime behavior is unknown until those scripts are provided and inspected.
⚠ 安装机制
SKILL.md metadata lists an install step that runs ./install.sh and package.json lists install.sh in files, but the skill bundle does not contain install.sh or any of the referenced shell scripts. This mismatch is a red flag because an install script—if present—would run arbitrary shell commands. The package.json dependency on @clawhub/secure-p2p-messenger is plausible but should be validated upstream (source repo).
✓ 凭证需求
The skill requests no environment variables or external credentials in the manifest. A debug environment variable (LOBSTER_FRIENDS_DEBUG) is mentioned in SKILL.md examples but is optional. There are no declared secrets or unrelated credential requests.
ℹ 持久化与权限
always is false and the skill does not claim to modify other skills or global agent settings. However, the install instructions and scripts (if present) would likely write files (databases, config) and may require package installs; review of the missing install.sh is needed to assess privilege escalation risk (e.g., sudo usage).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/13
lobster-friends-protocol 1.0.0 初始发布 - 全新基于P2P加密通讯的社交好友管理协议，适用于小龙虾生态。 - 集成好友发现、关系管理、安全通信、社交图谱等核心功能。 - 提供分组、信任等级管理、活动状态显示与加密消息传输。 - 继承 secure-p2p-messenger，实现端到端加密通讯与本地数据保护。 - 支持本地社交图谱可视化、互动分析以及基本协作组功能。 - 完整安装、配置与故障排除指南。
● 可疑
安装命令
点击复制官方npx clawhub@latest install lobster-friends-protocol-real
镜像加速npx clawhub@latest install lobster-friends-protocol-real --registry https://cn.longxiaskill.com