network-ai
Advanced tools
+2
-2
| { | ||
| "name": "network-ai", | ||
| "version": "4.10.2", | ||
| "version": "4.10.3", | ||
| "description": "AI agent orchestration framework for TypeScript/Node.js - 17 adapters (LangChain, AutoGen, CrewAI, OpenAI Assistants, LlamaIndex, Semantic Kernel, Haystack, DSPy, Agno, MCP, OpenClaw, A2A, Codex, MiniMax, NemoClaw, APS + streaming variants). Built-in CLI, security, swarm intelligence, real-time streaming, and agentic workflow patterns.", | ||
| "homepage": "https://github.com/Jovancoding/Network-AI#readme", | ||
| "homepage": "https://network-ai.org", | ||
| "main": "dist/index.js", | ||
@@ -7,0 +7,0 @@ "types": "dist/index.d.ts", |
+2
-2
@@ -5,6 +5,6 @@ # Network-AI | ||
| [](https://jovancoding.github.io/Network-AI/) | ||
| [](https://network-ai.org/) | ||
| [](https://github.com/Jovancoding/Network-AI/actions/workflows/ci.yml) | ||
| [](https://github.com/Jovancoding/Network-AI/actions/workflows/codeql.yml) | ||
| [](https://github.com/Jovancoding/Network-AI/releases) | ||
| [](https://github.com/Jovancoding/Network-AI/releases) | ||
| [](https://www.npmjs.com/package/network-ai) | ||
@@ -11,0 +11,0 @@ [](#testing) |
+8
-17
| ๏ปฟ--- | ||
| name: Network-AI | ||
| description: "Python orchestration skill: local multi-agent workflows via blackboard file, permission gating, and token budget scripts. All execution is local โ no network calls, no Node.js required. TypeScript/Node.js features (HMAC tokens, AES-256, MCP server, 17 adapters, CLI) are in the SEPARATE companion npm package (npm install -g network-ai) and are NOT part of this skill bundle." | ||
| description: "Local Python orchestration skill: multi-agent workflows via shared blackboard file, permission gating, token budget scripts, and persistent project context. All execution is local with zero network calls and zero third-party dependencies." | ||
| metadata: | ||
| openclaw: | ||
| emoji: "\U0001F41D" | ||
| homepage: https://github.com/Jovancoding/Network-AI | ||
| bundle_scope: "Python scripts only (scripts/*.py). The README.md in this repo describes the FULL project including the companion Node.js npm package โ features documented there (HMAC tokens, AES-256 encryption, MCP server, 17 adapters, CLI) are NOT implemented in these Python scripts and are NOT part of this ClawHub skill. Install the npm package separately for those features." | ||
| homepage: https://network-ai.org | ||
| bundle_scope: "Python scripts only (scripts/*.py). All execution is local." | ||
| network_calls: none | ||
| sessions_ops: "platform-provided โ sessions_send, sessions_list, and sessions_history are OpenClaw host platform built-ins, not implemented or invoked by this skill's Python scripts" | ||
| sessions_ops: "platform-provided" | ||
| requires: | ||
| bins: | ||
| - python3 | ||
| optional_bins: [] # No optional binaries required. Node.js is only needed for the SEPARATE companion npm package (not part of this skill). | ||
| optional_bins: [] | ||
| env: | ||
| SWARM_TOKEN_SECRET: | ||
| required: false | ||
| description: "Node.js MCP server only โ not used by these Python scripts. The Python permission layer uses UUID-based tokens stored in data/active_grants.json." | ||
| SWARM_ENCRYPTION_KEY: | ||
| required: false | ||
| description: "Node.js MCP server only โ not used by these Python scripts. The Python blackboard does not encrypt data at rest." | ||
| OPENAI_API_KEY: | ||
| required: false | ||
| description: "Not used by these Python scripts. Only used by the optional Node.js demo examples when running the companion npm package." | ||
| MINIMAX_API_KEY: | ||
| required: false | ||
| description: "Not used by these Python scripts. Only used by the optional Node.js MiniMaxAdapter when running the companion npm package." | ||
| description: "Not used by this skill." | ||
| privacy: | ||
@@ -32,3 +23,3 @@ audit_log: | ||
| scope: local-only | ||
| description: "Local append-only JSONL file recording operation metadata (agentId, action, timestamp, outcome). No data leaves the machine. Disable with --no-audit flag on network-ai-server, or pass auditLogPath: undefined in createSwarmOrchestrator config." | ||
| description: "Local append-only JSONL file recording operation metadata. No data leaves the machine." | ||
| --- | ||
@@ -38,3 +29,3 @@ | ||
| > **Scope of this skill bundle:** All instructions below run local Python scripts (`scripts/*.py`). No network calls are made by this skill. Tokens are UUID-based (`grant_{uuid4().hex}`) stored in `data/active_grants.json`. Audit logging is plain JSONL (`data/audit_log.jsonl`) โ no HMAC signing in the Python layer. HMAC-signed tokens, AES-256 encryption, and the standalone MCP server are all features of the **companion Node.js package** (`npm install -g network-ai`) โ they are **not** implemented in these Python scripts and do **not** run automatically. | ||
| > **Scope:** All instructions below run local Python scripts (`scripts/*.py`). No network calls are made. Tokens are UUID-based (`grant_{uuid4().hex}`) stored in `data/active_grants.json`. Audit logging is plain JSONL (`data/audit_log.jsonl`). | ||
@@ -41,0 +32,0 @@ ## Setup |
Network access
Supply chain riskThis module accesses the network.
Found 3 instances in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 5 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Network access
Supply chain riskThis module accesses the network.
Found 3 instances in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 5 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
1527691
-0.13%