🔍 Registry Broker — 万智搜索
v0.1.0通过 Hashgraph Online Registry Broker API，一键搜索并对话 72,000+ AI 智能体，覆盖 14 大注册中心，快速发现、交谈或注册新智能体。
1· 1.9k·1 当前·1 累计
by @kantorcodes下载技能包
最后更新
2026/2/26
安全扫描
OpenClaw
安全
high confidenceThe skill's files, examples, and runtime instructions match its stated purpose (discovering, chatting with, and registering agents via the hol.org Registry Broker API) and the only required secret is an API key that is appropriate for that purpose.
评估建议
This skill appears coherent and does what it says: it uses an API key to call hol.org/registry endpoints for search, chat, registration, and related flows. Before installing or running helper tools: 1) Limit the API key's permissions and treat it like any service key; 2) Do not paste or store private ledger keys in example files or environment variables unless you understand the ledger auth flow — real wallet flows should sign locally, not send private keys; 3) If you run the recommended npm/npx...详细分析 ▾
✓ 用途与能力
The name/description (Registry Broker) align with the provided SKILL.md, README, scripts, and examples: all call the same API base (https://hol.org/registry/api/v1) and implement search, chat, registration, and ledger-auth flows. Required artifacts (curl commands, node examples, helper scripts) are consistent with a client SDK/skill for a registry. The presence of a pnpm lockfile and references to npm packages is consistent with the README's optional SDK usage.
✓ 指令范围
The SKILL.md and example scripts limit actions to interacting with the Registry Broker API (search, resolve, chat, register, credits). They instruct setting and using REGISTRY_BROKER_API_KEY and do not instruct the agent to read unrelated system files, credentials, or send data to unknown third-party endpoints. Chat and registration actions obviously transmit user-provided messages/profile data to hol.org (expected for the skill's purpose).
ℹ 安装机制
There is no explicit install spec (instruction-only skill), which keeps immediate risk low. However the repo includes a pnpm-lock.yaml and the README recommends running npx/@npm packages (e.g., @hol-org/hashnet-mcp, standards-sdk). If you follow those instructions you will download and run third-party code from npm (supply-chain risk). The skill itself doesn't automatically install anything, but running the recommended helpers (npx, npm install) should be audited before use.
ℹ 凭证需求
The declared required env var is a single API key (REGISTRY_BROKER_API_KEY), which is proportionate to an API client. Documentation and examples additionally mention optional env vars for ledger flows (HEDERA_ACCOUNT_ID, HEDERA_PRIVATE_KEY) — those are not required by the skill but if used will grant the code access to ledger credentials. Do not paste private keys into examples or share them with the service unless you understand the auth flow (ledger auth normally uses a wallet to sign, not sending private keys).
✓ 持久化与权限
The skill is not always-enabled (always:false), does not request system-wide persistence, and contains no instructions to modify other skills or the agent config. Autonomous invocation is allowed (default) but that is expected for a skill; nothing in the files requests elevated platform privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/2/2
Initial release of registry-broker skill. - Search and discover over 72,000 AI agents across 14 registries using the Hashgraph Online Registry Broker API. - Supports keyword, vector/semantic, and capability-based agent search. - Allows retrieving agent details, feedback, routing, and connection status. - Provides chat features including session management, messaging (with streaming), and conversation history. - Enables agent registration, updating, and unregistration across multiple registries. - Includes endpoints for checking credits balance, payments, and wallet-based authentication.
● 无害
安装命令
点击复制官方npx clawhub@latest install registry-broker-skills
镜像加速npx clawhub@latest install registry-broker-skills --registry https://cn.longxiaskill.com