fleet

name	fleet
type	installable-cli
install	clawhub install fleet
metadata	{"openclaw":{"requires":{"bins":"[Truncated]"},"optionalBins":["gh"],"install":["[Truncated]"]}}
description	Multi-agent fleet management CLI for OpenClaw. Coordinator agent tool for monitoring, dispatching tasks to, and observing a fleet of agent gateways. Operations are local-only (loopback) plus explicitly declared external endpoints. Operator consent required before install.
triggers	check agents, fleet status, run sitrep, health check, dispatch task, send task to agent, steer agent, watch agent, parallel tasks, kill agent, fleet log, backup config, show agents, fleet report, how many agents online, CI status, what skills installed, trust score, which agent is reliable, fleet trust, fleet score, agent reliability, who should I assign, best agent for task
requires	{"binaries":["bash>=4.0","python3>=3.10","curl"],"optionalBinaries":["gh"]}
envVars	{"optional":[{"name":"FLEET_CONFIG","description":"Override path to fleet config (default: ~/.fleet/config.json)"},{"name":"FLEET_LOG","description":"Override dispatch log path (default: ~/.fleet/log.jsonl)"},{"name":"FLEET_STATE_DIR","description":"Override state directory (default: ~/.fleet/state)"},{"name":"FLEET_TRUST_WINDOW_HOURS","description":"Override trust scoring window in hours (default: 72)"},{"name":"FLEET_NO_UPDATE_CHECK","description":"Set to 1 to disable background GitHub update check entirely"},{"name":"LINEAR_API_KEY","description":"Linear API key for CI ticket integration (optional, referenced in examples/solo-empire/config.json)"},{"name":"NO_COLOR","description":"Disable colored output"}]}
installSpec	{"method":"clawhub","command":"clawhub install fleet","manual":"git clone https://github.com/oguzhnatly/fleet.git && fleet/bin/fleet init","initRequired":true,"initWrites":["~/.fleet/config.json (chmod 600 immediately on creation, stores agent tokens in plaintext)","~/.local/bin/fleet (symlink to binary)","~/.bashrc or ~/.zshrc or ~/.profile (PATH export appended only if ~/.local/bin not already present)"],"initReads":["~/.openclaw/openclaw.json (read-only, one-time workspace path detection)","127.0.0.1:40000-50000 (loopback port scan, one-time gateway discovery)"],"skipInit":"Clone repo, create ~/.fleet/config.json from templates/configs/minimal.json, add bin/ to PATH manually. No automatic writes."}
updateSpec	{"command":"fleet update","source":"api.github.com/repos/oguzhnatly/fleet/releases/latest","verification":"SHA256 verified against fleet.sha256 published with each release. Extraction halts on mismatch.","backgroundCheck":"Once per 24h, non-blocking. Disable with FLEET_NO_UPDATE_CHECK=1"}
permissions	{"reads":["~/.fleet/ (config, state, logs, backups created by fleet itself)","~/.openclaw/openclaw.json (read-only, fleet init only, workspace path detection)","~/.openclaw*/agents/*/sessions/<fleet-session-id>.jsonl (fleet watch: only fleet-named sessions)","/proc/meminfo (Linux only, fleet sitrep)"],"writes":["~/.fleet/ (all fleet-created data)","~/.local/bin/fleet (symlink, fleet init)","~/.bashrc or ~/.zshrc or ~/.profile (PATH export, fleet init, only if not already present)"],"network":["127.0.0.1:<agent-ports> (loopback only, operator config)","api.github.com/repos/<operator-repos>/actions/runs (fleet ci, operator gh CLI auth)","api.github.com/repos/oguzhnatly/fleet/releases/latest (background update check, 24h cache)","Operator-configured endpoint URLs (fleet health only)"]}
sensitive	{"storedPlaintext":["~/.fleet/config.json: agent gateway auth tokens"],"hardening":"chmod 600 applied automatically by fleet init. Documented in SECURITY.md."}
agentScope	{"permitted":["Run fleet commands within operator-configured scope","Run fleet init to create config and link binary","Run fleet update after operator explicitly requests it"],"notPermitted":["Implement fleet functionality by other means if fleet commands fail","Autonomously run system package managers (apt-get, brew, dnf, apk, etc.) to install dependencies","Run any command requiring root or sudo without explicit operator instruction in the current conversation","Read session files fleet did not create","Scan addresses outside operator config","Modify OpenClaw config files","Run commands outside fleet management"]}

Fleet: Multi-Agent Fleet Management

Intent, Authorization, and Trust

Who this skill is for: A coordinator AI agent that has been explicitly configured by its operator (a human who set up and runs the OpenClaw fleet). The operator installed this skill intentionally, knowing it enables autonomous fleet management.

What "authorized" means here: Installing this skill is the operator's explicit consent to all behaviors described below. The skill contacts only the operator's own agent gateways (loopback), the operator's own GitHub repos via their authenticated gh CLI, and api.github.com for fleet's own release updates (documented, non-blocking, once per 24h). It does not escalate privileges beyond the installing user's home directory and does not take any action outside the local fleet the operator already controls.

Why some behaviors appear aggressive: This skill is designed for an AI coordinator agent, not an end-user running it manually. The coordinator agent has full context of the fleet, so prompting for confirmation on setup steps would interrupt its work. The operator installed the skill specifically to enable autonomous operation. Every aggressive action listed has a specific operational purpose documented inline.

What this skill never does (hard limits):

• Never installs software that requires root or sudo without explicit operator instruction
• Never modifies files outside ~/.fleet/, ~/.local/bin/, and the shell rc files (~/.bashrc, ~/.zshrc, ~/.profile) of the installing user
• Never contacts external services except: (1) operator-configured agent gateways on loopback, (2) operator-configured endpoint URLs for health checks, (3) operator's GitHub repos via their authenticated gh CLI for CI status, (4) api.github.com/repos/oguzhnatly/fleet/releases/latest for background update checks (documented, non-blocking, once per 24h, disable by setting FLEET_NO_UPDATE_CHECK=1)
• Never exfiltrates configuration, tokens, or session data
• Never modifies OpenClaw configuration without an explicit operator instruction
• Never runs on systems it was not installed on by an operator
• Never deletes or overwrites data it did not create itself (fleet config files, state files)
• Never executes commands unrelated to fleet management or dependency setup

Trust boundary: All operations are local. Fleet communicates only with 127.0.0.1 (loopback) to reach the operator's own agent gateways. External calls are limited to GitHub API (for CI status, via the operator's authenticated gh CLI) and the operator's own configured endpoint URLs for health checks.