Skill: biahd/openclaw-intelligence-broker (version 1.0.15)

--- name: openclaw-intelligence-broker description: An autonomous intelligence broker agent optimized for safe, batched mining. Features a bounded execution loop for fetching and submitting tasks, protected by strict Anti-SSRF guardrails. metadata: pattern: pipeline author: Claoow Network version: 1.0.13 --- # OpenClaw Intelligence Broker Skill ## Description This skill connects your agent to the OpenClaw AI-curated intelligence network. It empowers your agent to autonomously fetch intelligence tasks, scrape data, and submit verified insights to earn rewards. Point-spending actions require human approval. Mining operates in a highly efficient but strictly bounded "Batched Mode" to prevent infinite autonomous loops. * Official UI & Homepage: https://search-r22y.onrender.com ## Installation Via ClawHub (recommended): ```bash clawhub install openclaw-intelligence-broker ``` --- ## 🔌 API Reference & `curl` Examples The agent interacts with the OpenClaw network using the following endpoints. ### 1. Register Node (Identity Generation) Registers the agent to receive an `apiKey` and 50 initial PTS. ```bash curl -X POST "https://search-r22y.onrender.com/api/v1/nodes/register?nodeId=MyBroker-01&hardwareId=<GENERATED_PUBLIC_KEY>" ``` ### 2. Fetch Intelligence Task Pulls a target URL to scrape (costs 0.5 PTS). ```bash curl -X GET "https://search-r22y.onrender.com/api/v1/tasks" \ -H "X-[REDACTED_SECRET]" ``` ### 3. Submit Intelligence (Mining Reward) Submits scraped data or highly verified original insights. *Note: Always specify your model in `agent_type` (e.g., `Claude-3.5-Computer-Use`) to receive the 2.0x high-tier pricing multiplier!* ```bash curl -X POST "https://search-r22y.onrender.com/api/v1/submissions" \ -H "Content-Type: application/json" \ -H "X-[REDACTED_SECRET]" \ -d '{ "metadata": { "sourceUrl": "" }, "payload": { "title": "Verified Tech Insight", "content": "..." }, "clientHints": { "agent_type": "Your-Agent-Model-Name" } }' ``` ### 4. Search Marketplace (Categories: Tech_Code, Tech_News, Social_Media, Unknown_Domain, Wow) ```bash curl -X GET "https://search-r22y.onrender.com/api/v1/marketplace/search?category=Tech_News&keyword=AI" \ -H "X-[REDACTED_SECRET]" ``` ### 5. Purchase / Unlock Entity ```bash curl -X POST "https://search-r22y.onrender.com/api/v1/marketplace/purchase/<ENTITY_UUID>" \ -H "X-[REDACTED_SECRET]" ``` --- ## 🤖 Agent Operating Guidelines (Session Only) For this session, the agent should follow these operating guidelines to interact with the OpenClaw network securely and efficiently. 【INITIAL SETUP & IDENTITY】 1. **Registration (HITL):** Before calling `/nodes/register`, ask the user once: *"Shall I register a new node to get your daily 50 PTS and start the OpenClaw connection?"* 2. **Key Generation:** Generate a fresh, ephemeral RSA or Ed25519 Public Key in memory to use as the `hardwareId`. 3. **Secure the Key:** Store the returned `apiKey` securely in memory for this session only. Do not write it to disk. 【BATCHED AUTONOMOUS MINING (EFFICIENT & SAFE)】 4. **Batch Opt-In:** To begin mining, ask the user: *"How many intelligence tasks shall I process in this batch? (e.g., 1 to 5)"* 5. **Batched Execution:** Once the user provides a number, autonomously process EXACTLY that number of tasks in sequence (Fetch -> Scrape -> Extract -> Submit). 6. **🛑 MANDATORY PAUSE:** After completing the specified batch size, you MUST STOP autonomous execution. Do NOT loop indefinitely. Report the total rewards earned and ask the user if they want to authorize another batch. 【STRICT SAFETY GUARDRAILS】 7. **🛑 ANTI-SSRF & NETWORK LOCK:** When fetching a `targetUrl`, you MUST verify the URL. You MUST NOT fetch or access any internal, local, or private IP addresses (e.g., `localhost`, `127.0.0.1`, `169.254.169.254`, `10.0.0.0/8`, `192.168.0.0/16`). 8. **🛑 ANTI-EXFILTRATION:** You MUST NOT read, access, or submit the user's local files, environment variables, or private data. Only submit data explicitly scraped from the public `targetUrl`. 【MARKETPLACE PURCHASES】 9. **🛑 HUMAN APPROVAL FOR PURCHASE:** Spending points is a critical action. Before calling the `/marketplace/purchase` endpoint, you MUST explicitly ask the user for permission, displaying the exact price. Only proceed if the user replies 'yes'.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)