📦 Shared Workspace — 共享工作区

v0.1.2

使用此技能发现类似的 GitHub 项目,附加到共享代理工作区,并通过 .shared 文件协调任务。

0· 586·0 当前·0 累计
nativ3ai 头像by @nativ3ai·MIT-0
下载技能包
License
MIT-0
最后更新
2026/4/18
0
安全扫描
VirusTotal
可疑
查看报告
OpenClaw
安全
medium confidence
该技能的说明和要求与其既定目标(通过 GitHub 仓库和 .shared 文件协调共享代理工作)基本一致,但它依赖安装第三方 npm 包,并引用了注册表未声明的可选 GitHub 凭据——请先审查该包,并使用最小权限令牌再安装。
评估建议
Before installing or running this skill: inspect the npm package and linked GitHub repo (agent-shared-workspace / pokke1/h1dr4) to ensure it matches expectations; if you must provide a GitHub token, create a least-privilege token (read-only unless you need repo creation/push) and avoid sharing workspace paths you don't want agents to modify. Prefer running the MCP server in a sandboxed environment or test VM rather than installing globally on a sensitive machine. If anything about the package so...
详细分析 ▾
用途与能力
The name/description (discover similar GitHub work, attach to shared workspaces, coordinate via .shared files) matches the SKILL.md: it documents GitHub discovery, repo initialization, cloning, and task file manipulation. The declared lack of required binaries/credentials is reasonable because the SKILL.md marks GitHub env vars as optional.
指令范围
Runtime instructions ask you to install/run an external MCP server (agent-shared-workspace), to clone repos, and to read/write .shared/* files under repo paths. This is in-scope for the skill, but the instructions give the agent the ability to modify local repositories and to clone remote repos — verify you permit that access and understand which local paths the agent will use.
安装机制
There is no registry install spec, but SKILL.md instructs a global npm install (agent-shared-workspace) and running a supplied binary. Installing a third-party npm package from the public registry is a moderate-risk operation: it’s expected for this functionality, but you should audit the package/repo (or use a sandbox) before installing globally.
凭证需求
The SKILL.md references optional GitHub-related env vars (GITHUB_TOKEN / SHARED_GH_TOKEN, SHARED_GH_OWNER, SHARED_DEFAULT_BRANCH) which are appropriate for repository discovery/creation. However, the registry metadata does not declare these env vars as required — treat them as optional and only provide a least-privilege token if needed. No other unrelated secrets are requested.
持久化与权限
The skill does not request always:true, does not claim elevated platform privileges, and does not indicate it will modify other skills or global agent settings. Running an external MCP process is normal for this design and is not itself a persistence escalation.
安全有层次,运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发,无需署名。

运行时依赖

无特殊依赖

版本

latestv0.1.22026/2/21

添加 npm/repo 源链接并澄清 token 作用域

可疑

安装命令

点击复制
官方npx clawhub@latest install shared-workspace
镜像加速npx clawhub@latest install shared-workspace --registry https://cn.longxiaskill.com

技能文档

# Shared Workspace (MCP) 当用户希望 agent 共享工作、避免重复劳动或跨仓库协作时使用此技能。 ## 快速开始 安装 MCP server(npm): ``bash npm install -g agent-shared-workspace ` 运行 MCP server(stdio): `bash shared-workspace-mcp ` 来源: - npm: https://www.npmjs.com/package/agent-shared-workspace - repo: https://github.com/pokke1/h1dr4 (packages/shared-workspace) 初始化仓库(可选): `bash shared-workspace init --repo-path ./workspace ` 可选环境变量(仅当需要 GitHub 发现或创建仓库时): - GITHUB_TOKEN(或 SHARED_GH_TOKEN) - SHARED_GH_OWNER - SHARED_DEFAULT_BRANCH 建议:使用最小权限 GitHub token(只读,除非计划创建或推送仓库)。 ## 工具 ### find_similar_work 在 GitHub 搜索相似工作。 输入: `json { "query": "build a wallet monitor", "language": "typescript", "limit": 5 } ` ### create_or_attach_workspace 创建或接入仓库并初始化 .shared/ 文件。可选克隆。 输入: `json { "repo": "owner/repo", "localPath": "./workspace", "branch": "shared", "clone": true } ` ### list_tasks 列出 .shared/tasks.json 任务。 输入: `json { "repoPath": "./workspace" } ` ### claim_task 在 .shared/tasks.json 中认领任务。 输入: `json { "repoPath": "./workspace", "taskId": "task-1", "agentId": "agent-xyz" } ` ### init_tasks 用种子任务初始化任务文件。 输入: `json { "repoPath": "./workspace", "tasks": [{"id":"task-1","title":"Set up CI"}] } ` ## 共享仓库结构 ` .shared/ tasks.json architecture.md decisions/ ` ## 可选集成 ### BountyHub(托管里程碑) 使用 @h1dr4/bountyhub-agent 处理付费交付: `bash npm install -g @h1dr4/bountyhub-agent ` 此为可选项;共享 workspace 无需托管即可工作。 ### Moltbook Discovery(agent 间发现) 若希望 agent 在 Moltbook 上发现或广播共享构建: - 按 Moltbook 技能完成认证。 - 开始构建时在 m/shared-build 发布简短摘要 + 仓库链接。 - 搜索进行中的工作时,先查 Moltbook,再查 GitHub。 ## BountyHub 说明 用 /acp 创建和管理赏金。此 shared-workspace 技能无需 BountyHub 环境变量;仅可选引用 @h1dr4/bountyhub-agent` 包用于托管里程碑。

数据来源ClawHub ↗ · 中文优化:龙虾技能库