🚀 Astron Agent Open Source · Bi-Weekly Report (Jun 1 – Jun 14, 2026)

[FenjuFu]

🚀 Astron Agent Open Source · Bi-Weekly Report (Jun 1 – Jun 14, 2026)

---

🌟 Highlights

• Topping the OSS Insight Java trending board: across the last three months of Java repositories, SkillHub refactor: centralize docs by linking to community repository #3 · Astron Agent #5 · Astron RPA #8 — all three projects landed in the Top 10 at the same time.
• SkillHub ships two releases back-to-back: v0.2.10 (Jun 5) + v0.2.11 (Jun 11), and officially launches the AgentGuard security line of defense, rounding out the skill ecosystem with "security health checks + malicious-skill scanning."
• Astron Agent iterating fast: 35 PRs merged in two weeks — Agent workbench refactor, custom MCP runtime tools, debug session history, and a team publishing approval flow all landed.
• Highly active community support: the discussion group worked through a large volume of real-world adoption questions, concentrated in three areas — SkillHub on-prem publishing, Astron Agent open-source deployment, and Astron RPA client stability.

---

👥 Top 10 Active Community Contributors (Jun 1 – Jun 14, 2026)

Based on message volume in the open-source discussion group (automated bots such as the Astron Q&A bot excluded); nicknames anonymized. Thank you to everyone who answered questions, asked questions, and built alongside us 🙌

---

📦 Release Highlights

🛡️ SkillHub v0.2.11 (Jun 11) — AgentGuard security line of defense goes live

• ✨ Officially integrated AgentGuard: add security health checks, malicious-skill scanning, dynamic runtime risk control, and trust management to your AI Agent in one step (npx clawhub install agentguard).
• ✨ Support for syncing built-in Skills from a cloud manifest (#498); the web UI now previews relative Markdown package links (#502).
• 🐛 Accept SKILL.md case-insensitively on publish (#507); added namespace search and bundle download (#482).
• 📝 Release: https://github.com/iflytek/skillhub/releases/tag/v0.2.11

🔧 SkillHub v0.2.10 (Jun 5) — Skill discovery & download experience upgrade

• ✨ New "install methods" tab; My Skills now supports keyword search, namespace filtering, and pagination (#493).
• ✨ CLI / domain can download skills from a non-global namespace (#497); built-in skills initialized on setup (#481).
• 🐛 Fixed skill-deletion cleanup, an 8-hour timezone offset in audit logs (#472), and anonymous download of globally public skills.

🤖 Astron Agent — 35 PRs in two weeks (workbench & MCP capability upgrades)

• 🚀 Refactored the Agent workbench (#1397 / #1384); added custom MCP runtime tools (#1399) and preserved MCP runtime tool names (#1400).
• 🚀 Added Agent debug session history (#1392) and a team publishing approval flow (#1383); improved streaming replies and debug search (#1396).
• 🔧 Multiple rounds of code-scanning security hardening (#1398 / #1402) and web-search tool orchestration improvements (#1394).

⚙️ Astron RPA — Client stability fixes

• 🐛 For high-frequency scheduled tasks (about one run every 2 minutes), the client would hit a network error and crash on a buffer overflow after 1–2 days of running. The engineering team pinpointed the root cause, shipped a hotfix build, and merged it back to the main repo after stability was verified.
• 🐛 Blank screen in the browser-plugin install UI: identified as a known bug; a temporary workaround is to install manually from AppData\Roaming\astron-rpa\...\browser_plugin\plugins.

---

💬 Community Q&A & Discussions (Bi-Weekly Picks)

Grouped by product line; all are real community questions + the engineering team's solutions. 🟢 Resolved / 🟡 In progress.

SkillHub (mostly on-prem publishing & governance)

• 🟢 Bulk-downloading skills on an intranet: use the skillhub CLI install command with --dir to target a directory; script it to run in batches.
• 🟢 Publish returns 400 / nameConflict: a published skill with the same name already exists in the global namespace → change name in SKILL.md, switch namespace, or have an admin handle it; the team has planned to improve the error message.
• 🟢 Skill package validation malformed input: usually a non-UTF-8 zip produced by a Windows archiver or a path containing CJK characters → repackage as UTF-8.
• 🟢 Telling CLI vs Server versions apart: skillhub version shows the CLI version; docker image inspect ... image.version shows the Server version (CLI features require Server ≥ v0.2.7).
• 🟢 Database support: currently PostgreSQL only (MySQL not yet supported).
• 🟡 SSE pushes not received: backend heartbeat is fine but the frontend event stream isn't receiving publish/custom events — under investigation.
• 🟡 Capability boundaries clarified: distributing Plugins / uploading "skill groups," editing a user's submitted skill directly during review, and linking the release-tag channel to platform versions are not yet supported — all logged as follow-up requests.

Astron Agent (mostly open-source deployment)

• 🟢 Auth redirect breaks after changing the port: root cause is the callback URL of the Casdoor application not being updated alongside the Nginx/portal port → add the callback URL to the corresponding Casdoor app.
• 🟢 Local model config not taking effect: only a few variables need changing in .env; add the model on the "Model Management" page (any OpenAI-protocol-compatible model works). We've also flagged that the deployment docs need updating.
• 🟢 Avatar upload fails: check whether the MinIO port is open; in offline environments you can click "Skip" when creating an agent.

Astron RPA (mostly client adoption)

• 🟢 Can't run after closing Remote Desktop / flow images lost after switching machines: provided log-location guidance (AppData\Roaming\astron-rpa) and cloud-config instructions.
• 🟢 Building the client from source: see BUILD_GUIDE.zh.md — you only need to build the client; we encourage the community to self-test against main and submit PRs back (e.g. issue #796).
• ℹ️ Console open-source / commercial pricing: the RPA console is not open-sourced yet; for the commercial edition see https://www.iflyrpa.com/pricing (the open-source edition can be extended to meet most needs).

📌 Commercial compliance guide: Astron Agent's commercial boundaries under Apache 2.0, plus the SOP for closed-source resale and SaaS deployment — see Discussion #839. We also warmly invite enterprise users to co-build adoption case studies (selected cases get official 1:1 technical support + joint promotion).

---

🙌 Community Call: Come Contribute! (Good First Issues & Bounties)

Newcomer-friendly and rewarding from your first commit (contribution points are redeemable at the points store):

🌱 Good First Issues (great for a first contribution)

Project	Issue	What it's about
Astron Agent	#1412	Expand the docs FAQ
Astron Agent	#1410	Contribute a workflow example to the gallery
Astron Agent	#1405	"Are you using Astron Agent?" user-story collection
Astron RPA	#805	"Are you using Astron RPA?"
SkillHub	#528	"Are you using SkillHub?"

💰 Bounties (reward · more challenging, more rewarding)

Project	Issue	What it's about
Astron Agent	#1067	Let OpenClaw trigger Astron Agent to schedule an RPA bot for secure operations
Astron Agent	#1066	Build a "ChatClaw" app on the drag-and-drop canvas with visual fine-tuning
Astron Agent	#709	Support the A2A (agent-to-agent) protocol

👉 Want to claim one? Just comment on the issue. Not sure where to start? Ping us in the discussion group and the engineering team will help break the task down.

---

✨ Community Spotlight

• 🛡️ AgentGuard launch deep-dive: adding security health checks and malicious-skill scanning to AI Agents — article (Zhihu)

---

💬 Got questions, ideas, or want to contribute? Join the discussion group, or head straight to the repos under iflytek-astron to open an Issue / PR.
Let's build a thick, solid open-source ecosystem for enterprise-grade AI Agents together 🚀

[dongjiang1989]

Great! 🎉 @FenjuFu Need add Weekly report to http://opensource.iflytek.com/blog