📦 ZworkerAgentSkillOpenClaw控制Zworker
v1.0.2AI自动化任务应用，支持任务管理、定时计划控制、用户信息同步和消息通知转发。当用户提到“zworker”关键词时使用此技能，例如：同步用户信息、获取任务列表、执行任务、管理定时计划、获取并发送通知等。技能通过HTTP接口与本地运行的zworker应用（localhost:18803）通信。
0· 37·0 当前·0 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceThe skill largely matches its stated purpose (controlling a local zworker service) but contains several inconsistencies between its instructions and included scripts—especially around how user info is gathered and how messages are sent—so you should review those gaps before installing or giving it autonomy.
评估建议
What to consider before installing:
- This skill talks to a local service on http://localhost:18803 and includes client scripts that also target only localhost — that is expected for a local integrator, but ensure the zworker app running there is trusted.
- SKILL.md says the agent should read OpenClaw's openclaw.json and use an OpenClaw message tool, but the packaged scripts do not automatically read that file or send messages; the agent (or additional glue) would need file access or message too...详细分析 ▾
⚠ 用途与能力
The skill's name/description describe controlling a local zworker service on localhost:18803, which matches the included Python client and scripts. However, the SKILL.md claims the agent will read OpenClaw's openclaw.json and use an OpenClaw 'message' tool to send messages, while the manifest declares no required config paths or environment variables and the provided scripts do not implement automatic reading of openclaw.json or sending via a message tool. That mismatch (declared zero requirements but runtime expectations for local files/tools) is disproportionate and unexplained.
⚠ 指令范围
SKILL.md instructs reading local OpenClaw configuration (openclaw.json) and using an external 'message' tool to forward notifications. The included scripts instead expect input via stdin, CLI args, or files (sync_users.py) and only output notification data (fetch_notifications.py) rather than sending messages themselves. This gives the agent broad discretion to read local files or invoke host messaging tooling at runtime; the instructions lack concrete, constrained paths or explicit message-sending implementation.
✓ 安装机制
No install specification is provided (instruction-only with included scripts). Nothing is downloaded or written by an install step. Included Python scripts are present but no package installation or network fetch occurs as part of installation.
⚠ 凭证需求
The skill declares no required environment variables or credentials, yet operation depends on local artifacts and tools (openclaw.json, an OpenClaw message-sending tool, and a local zworker HTTP service). Because those are not declared as required config paths or env vars, it's unclear what the agent will try to access at runtime. There is no request for remote credentials, and network access is limited to localhost in the code, which is appropriate — but the absence of declared local file or tool requirements is a mismatch.
✓ 持久化与权限
Flags: always=false and disable-model-invocation=false (normal). The skill does not request permanent/system-wide presence, does not modify other skills' configuration files, and does not claim elevated privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/4/22
zworkeragentskillopenclaw v1.0.2 - 新增完善的中文文档（SKILL.md），详述所有功能、接口与使用方法。 - 明确列出同步用户信息、消息通知、任务及定时计划管理等核心能力。 - 详细描述各操作的输入语句、接口调用流程和输出格式。 - 列出所有脚本工具及关键配置说明，便于快速集成和故障排查。 - 重点强调本地HTTP接口调用与后续可能的认证需求。
● 无害
安装命令
点击复制官方npx clawhub@latest install zworkeragentskillopenclaw
镜像加速npx clawhub@latest install zworkeragentskillopenclaw --registry https://cn.longxiaskill.com