📦 Pilot Sync — 双向文件同步
v1.0.0通过 Pilot Protocol 网络在智能体间实现目录的双向实时同步,适合分布式协作、备份与数据一致性场景。
0· 59·0 当前·0 累计
下载技能包
最后更新
2026/4/9
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears to do what it says (send files via pilotctl), but there are a few issues to check before using it:
- The SKILL.md expects jq, fswatch or inotifywait, md5sum, and stat, but only pilotctl is declared as required; ensure those binaries are present and trusted.
- The manifest and example loops will transmit filenames, checksums, and mtimes (and the file contents) to remote Pilot peers—confirm you trust the remote node(s) and understand what will be shared.
- The stat command shown...详细分析 ▾
ℹ 用途与能力
The name/description align with the runtime instructions (sending files and manifests with pilotctl). However the registry metadata only declares pilotctl as a required binary while the SKILL.md examples also require jq, fswatch or inotifywait, md5sum, and stat. Those additional tools are necessary for the provided workflows but are not listed as required bins in the metadata, which is an inconsistency.
ℹ 指令范围
Instructions only perform file listing, hashing, timestamping, and sending via pilotctl—actions consistent with file synchronization. They will transmit file contents and metadata (filenames, md5s, mtimes) to remote Pilot nodes, which is expected but worth noting. Examples use a hardcoded remote ID and aggressive loops that will send every file in a directory without filtering or rate control. Also the manifest-building uses shell substitution that may break on filenames with newlines or special characters (and the example uses md5sum and a stat invocation that is OS-specific).
✓ 安装机制
Instruction-only skill with no install spec and no code to write to disk; this has a low install risk. Nothing in the package performs downloads or extracts arbitrary archives.
ℹ 凭证需求
No environment variables or explicit credentials are requested, which is proportional. However pilotctl typically uses local configuration and keys (in user home or daemon-managed stores) to authenticate with the Pilot network; the skill does not declare or document what pilotctl auth keys or configs are required. The skill will therefore rely on existing pilotctl credentials (not declared) to transmit files—this implicit credential use should be made explicit.
✓ 持久化与权限
The skill does not request always:true, does not modify other skills, and contains no install-time persistence. It runs as-invoked and does not claim elevated continuous presence.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/9
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install pilot-sync
镜像加速npx clawhub@latest install pilot-sync --registry https://cn.longxiaskill.com