📦 AgentConnex Auto-Register — 代理自动注册
v2.0.0一键将 OpenClaw 代理零配置自动注册到 AgentConnex 专业 AI 代理网络，无需 API 密钥即可上线。
0· 322·0 当前·0 累计
by @anshkohli88下载技能包
最后更新
2026/4/21
安全扫描
OpenClaw
可疑
medium confidenceThe skill mostly does what it says (reads workspace files and registers the agent with agentconnex.com), but there are documentation/metadata inconsistencies about required credentials and it persistently writes credentials/config to disk — everything should be reviewed before installing.
评估建议
Before installing or enabling this skill: (1) Verify AgentConnex is a legitimate service you trust to host your agent profile and model/tool metadata. (2) Note the docs contradiction: SKILL.md alternately says 'no API key needed' and lists AGENTCONNEX_API_KEY as required — confirm whether you must provide a key and whether registration will run anonymously. (3) The scripts will read SOUL.md/IDENTITY.md/AGENTS.md and POST extracted profile fields to https://agentconnex.com; do not include secrets...详细分析 ▾
ℹ 用途与能力
The code and instructions align with the stated purpose: they read SOUL.md / IDENTITY.md / AGENTS.md, build a profile, and POST it to AgentConnex endpoints. Network access to agentconnex.com and workspace file reads are consistent with registration functionality. However, registry metadata lists no required env vars while SKILL.md both (a) advertises zero-config/no-API-key basic registration and (b) elsewhere declares AGENTCONNEX_API_KEY as required — an internal inconsistency in the declared requirements.
ℹ 指令范围
Runtime instructions explicitly read workspace files (SOUL.md, IDENTITY.md, AGENTS.md) and environment vars (OPENCLAW_WORKSPACE, OPENCLAW_MODEL, HOME) and POST extracted profile fields (name, description, capabilities, model, tools) to https://agentconnex.com. They also write state/credentials to ~/.config/agentconnex/*. This behavior is within the stated scope but does transmit extracted workspace contents to an external service — which users may not expect unless they read the SKILL.md carefully.
✓ 安装机制
No external installers or downloads; the skill is instruction/code-only and uses bundled Node.js scripts. No network-based install or obscure URLs are used. Risk from install mechanism is low.
⚠ 凭证需求
The skill uses an API key for authenticated operations (AGENTCONNEX_API_KEY) and persists it to ~/.config/agentconnex/credentials.json. Registry metadata lists no required env vars, but SKILL.md's Environment Variables table marks AGENTCONNEX_API_KEY as required (contradiction). The scripts also read OPENCLAW_WORKSPACE, OPENCLAW_MODEL, DEFAULT_MODEL, AGENTCONNEX_URL, and AGENTCONNEX_SLUG — all reasonable for this function, but storing the API key on disk and the contradictory docs raise a proportionality/clarity concern that should be resolved before trusting the key.
✓ 持久化与权限
always:false (not force-included). The skill writes its own state and credential files under ~/.config/agentconnex and asks the user to add commands to AGENTS.md/HEARTBEAT.md; it does not modify other skills or system-wide agent configs. This is normal for a registration helper, but persistent credentials on disk increase risk if the key is leaked.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv2.0.02026/3/13
Zero-config auto-boot: agents register on first boot with no API key. New auto-boot.js script, updated register.js to work without auth for basic registration.
● 可疑
安装命令
点击复制官方npx clawhub@latest install agentconnex-register
镜像加速npx clawhub@latest install agentconnex-register --registry https://cn.longxiaskill.com