William2333ZZ

Create a new monoU agent and connect it to Gateway. Use when the user asks to create/new/spawn an agent (本地或远程). Supports one-command local creation, remote deploy, Windows persistent startup, and skill/persona customization.

Minimal terminal coding harness. Use when the user wants coding-agent behavior: read files, run bash commands, edit files with exact replace, write new files; prefer read-before-edit, grep/find/ls for discovery; concise responses with clear paths.

定时任务管理：列出、创建、更新、删除、立即运行与查看状态。调度类型支持 at（一次性时间）、every（固定间隔）、cron（cron 表达式）。不依赖 openclaw；任务持久化在 .first_paramecium/cron/jobs.json。

工作区长期记忆的检索、读取与写入，持久化在 ./.first_paramecium 下。工具：memory_search、memory_get、memory_store、memory_recall、memory_forget、memory_sync。短期/多轮由 state.messages 提供；跨会话用 memory_store 或 write 写入后用 memory_search 回忆。

Minimal terminal and file harness. Use when the agent needs to read files, run bash commands, edit or write files; prefer read-before-edit; concise responses with clear paths.

Export solution content to a standard Word document (.docx). Use when the user says '输出word文档' / '导出Word' / '生成Word' / '下载Word'. Call generate_word_document with the current solution content, client name, and optional date.

Requirement interpretation and solution document generation. Use when the user uploads or pastes customer requirements (Word/Excel or plain text), or asks to generate/revise a solution document. Always follow the 6-chapter template; support multi-turn iteration from conversation history.

Minimal terminal coding harness. Use when the user wants coding-agent behavior: read files, run bash commands, edit files with exact replace, write new files; prefer read-before-edit, grep/find/ls for discovery; concise responses with clear paths.

Security-audit an AI agent's OWN framework code for classic appsec vulnerabilities the LLM can't defend — path traversal, command injection, SSRF, fail-open security controls, missing/late auth, unsafe deserialization — especially at the untrusted-input boundaries (channels, file/media handlers, config & skill loaders) that run around and before the model. The LLM layer is often hardened; the plumbing around it usually isn't. Authorized testing of agents you own or are permitted to test.

Orchestrate a static + dynamic, exploit-validated red-team of an AI agent — read the source to find candidate vulnerable paths, then run the dynamic skills to confirm or refute each one empirically. The arbiter of truth is whether the exploit works, not a model vote. Authorized testing of agents you own or are permitted to test.

The end-to-end methodology for red-teaming a specific AI agent — adaptively, exploit-validated, and honestly. Read THIS target's own code, stand up a disposable harness, and prove or refute each weakness through a real attacker-reachable entry point. This is the orchestration + discipline that makes a finding credible, not a list of payloads. Authorized testing of agents you own or are permitted to test.

Red-team an AI agent for prompt injection — does content the agent is asked to process (email, page, ticket, tool result) override its actual task? Authorized testing of agents you own or are permitted to test.

Red-team an AI agent's tools — can it be coerced (often via injection) into calling a tool it shouldn't, with attacker-influenced arguments, or into acting as a confused deputy with its own privileges? Authorized testing of agents you own or are permitted to test.

Red-team an AI agent's tool-execution isolation — do tools run un-sandboxed on the host, and does the sandbox silently disable itself when a dependency is missing? Authorized testing of agents you own or are permitted to test.

Red-team an AI agent's high-risk action gating — can a costly or destructive action (pay, message, delete) reach execution without out-of-band human confirmation, especially under auto-approve/unattended modes? Authorized testing of agents you own or are permitted to test.

Red-team the channels an AI agent listens on (Telegram/Discord/Slack/WhatsApp/email/webhooks) — can untrusted inbound content, including group messages and forwards, steer the agent? Authorized testing of agents you own or are permitted to test.