📄 skillActivePromisingmedium
AstrBotDevs/AstrBot
by AstrBotDevs
AI Agent Assistant & development framework that integrates lots of IM platforms, LLMs, plugins and AI feature, and can be your openclaw alternative. ✨
Supported Platforms
🧠 Codex
Quality Breakdown
104/ 200
Content Signals
Repo Health
Multi-platform bonus: +5 pts if tool supports 2+ platforms. Score derived from 12 structural signals — not stars or popularity.
Trust & Verification
medium
Requires extended permissions (shell access, subagents). Review before use.
Active
Updated within the last 90 days. Actively maintained.
Risk Assessment
- Repository contains multiple GitHub Actions workflows that execute code (build-docs.yml, codeql.yml, docker-image.yml, release.yml, etc.) which could potentially be manipulated
- Dockerfile present indicating container execution capabilities
- Plugin/extension system (.astrbot-plugin structure) allows loading external code, which could be exploited for arbitrary execution
- CLI commands present (cmd_run.py, cmd_init.py) that modify system state and configuration
- MCP (Model Context Protocol) client implementation (mcp_client.py) suggests external tool integration with potential for command execution
- Agent system with hooks and handoff mechanisms could enable chained autonomous operations