AEO — Agent 效果运营平台。自动发现 Agent 效果漂移、诊断根因、运行 AI 数据闭环工具链，给出 AI 效果优化方案。Measure agent performance, attribute outcomes, track quality trends, optimize cost, and mo...
Security Analysis
medium confidenceThe skill claims to provide an agent monitoring/optimization platform but is instruction-only and requests no installs, files, or credentials — this mismatch suggests it's incomplete or not what it claims.
The name/description describe a full 'Agent Effect Operations' platform (monitoring, root-cause diagnosis, data-loop tooling, cost/SLA optimization). Yet the skill declares no dependencies, no environment variables, no config paths, and includes only a brief metadata description. A real implementation would normally require access to agent logs/metrics, storage, external APIs, or credentials; those are absent, making the stated purpose implausible as-is.
SKILL.md contains only a name and description and provides no runtime instructions, commands, or endpoints. That means the skill currently does nothing operationally — which is safe but also inconsistent with the functionality it advertises.
No install spec and no code files are present, so there is nothing to write to disk or execute. From an install-perspective this is low risk.
The skill requests no credentials or environment variables despite promising integrations that normally require access to logs, metrics backends, or cloud services. This mismatch could mean the skill is unfinished or that necessary access will be requested later in an unexpected way.
The skill does not request always-on presence and uses default invocation settings. It does not declare any privilege to modify other skills or system-wide settings.
Guidance
This skill's description promises substantial monitoring and optimization features but the package contains only a short description and no runtime instructions, installs, or credential requests. That usually means the skill is incomplete or a placeholder. Before installing or enabling it: (1) ask the publisher for a full SKILL.md describing exactly what it will read, what services/endpoints it calls, and what credentials it needs; (2) refuse to provide any secrets until you see a concrete implementation and a trustworthy source; (3) prefer skills that declare the minimal, specific env vars and APIs they need; and (4) if code is later added, review it (or request a security review) to confirm it does only what it claims. Because of the mismatch, treat this package as non-functional or unfinished rather than immediately useful.
Latest Release
v0.0.2
更新描述至最新项目定位
Popular Skills
Published by @yuchangxu1989-openclaw on ClawHub
