
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
openpollen
Advanced tools
安全、易用、可扩展的开源 AI Agent 框架
OpenPollen 是一个开源的多平台 AI Agent 框架,基于 Claude Agent SDK 构建。支持钉钉、飞书、企业微信等聊天平台接入,通过 SKILL.md(Agent Skills 开放标准)实现技能的安装、发现和执行。
npm install -g openpollen
openpollen init
交互式向导将引导你完成:
openpollen start
完整文档请访问 OpenPollen 文档站。
本地预览文档:
cd docs-site && npx vitepress dev
技能的本质是一个 SKILL.md 文件,遵循 Agent Skills 开放标准。
---
name: code-review
description: 自动审查代码,给出改进建议
allowed-tools: Read, Grep, Glob
---
# 代码审查
审查用户提供的代码...
openpollen skill list # 列出已安装技能
openpollen skill install code-review # 从市场安装
openpollen skill install ./my-skill/ # 从本地安装
openpollen skill remove code-review # 卸载技能
openpollen skill create my-skill # 创建新技能
配置文件 openpollen.json(JSON5 格式),支持 ${ENV_VAR} 环境变量替换。
参见 openpollen.json.example 了解完整配置项。
初始化时选择「云端托管」会默认通过 OpenPollen 官方代理转发 API 请求,方便国内用户开箱即用。你也可以随时切换为其他方式:
providers.anthropic 中填入你的 Anthropic API Key,直连官方 APIproviders.ollama,使用本地部署的 Ollama 模型,数据完全不出本机所有网络请求行为均可在配置文件中查看和修改,不存在隐式的数据收集。
git clone https://github.com/tom-byte-sys/OpenPollen.git
cd OpenPollen
npm install
npm run dev
FAQs
安全、易用、可扩展的开源 AI Agent 框架
The npm package openpollen receives a total of 14 weekly downloads. As such, openpollen popularity was classified as not popular.
We found that openpollen demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.