by 安全扫描
OpenClaw
安全
high confidenceThe skill's requested tools and instructions are consistent with its stated purpose (automating Claude-driven development loops); it is instruction-only and coherent, but it enables powerful repo-level automation (PR creation/merge, CI fixes) so use caution and restrict permissions.
评估建议
This skill is coherent with its stated goal (automating Claude-driven pipelines), but it enables high-impact actions: creating branches, committing, pushing, opening and merging PRs, and auto-fixing CI failures. Before using it: 1) test in a sandbox repository and enable --disable-commits or dry-run modes; 2) set conservative caps (max-runs, max-cost, max-duration) and require manual approval before merges; 3) ensure your gh CLI is scoped to only the repos you intend (use a token with minimal sc...详细分析 ▾
✓ 用途与能力
The name/description (autonomous loops, pipelines, PR automation, DAG orchestration) aligns with the declared requirements: gh/git for repository and PR operations, node for the persistent REPL script examples, and CLAW_SESSION/CLAW_SKILLS to select session context/skill sets. Nothing requested appears unrelated to the described automation patterns.
ℹ 指令范围
SKILL.md instructs the agent to read/write session files (~/.claude/sessions/{name}.md), create/update SHARED_TASK_NOTES.md, run claude -p, run git/gh commands (create branches, push, create and merge PRs), and poll CI logs. These actions are within the skill's scope but are powerful: they will read local repo files, modify code, commit/push, and can auto-fix and auto-merge PRs if enabled. The doc correctly advises limits, but users should be aware these instructions grant the agent effective control over repo changes when invoked.
✓ 安装机制
No install spec and no code files are present; this is instruction-only. That lowers supply-chain risk because nothing is downloaded or written by an installer. The skill relies on existing binaries on PATH (gh, git, node).
✓ 凭证需求
Only CLAW_SESSION and CLAW_SKILLS are required (plus gh/git/node binaries). Those env vars map to session selection and skill composition and make sense for persistent REPL and pattern selection. The skill does not request unrelated credentials (no cloud keys, tokens, or passwords). Note: using gh implies the user will have gh auth configured — that grants repository privileges, so treat gh credentials carefully.
✓ 持久化与权限
always is false and the skill is user-invocable; it does not request permanent forced inclusion. The instructions describe persisting session and task files and automating PR lifecycle, which is expected behavior for this class of skill. Because autonomous invocation is allowed, the usual caution applies: if the agent is allowed to run these loops unattended, it may create/merge PRs and spend tokens/costs unless caps are set.
安全有层次，运行前请审查代码。
运行时依赖
🖥️ OSLinux · macOS · Windows
版本
latestv1.0.12026/4/6
Fixed metadata: added required bins (gh, git, node) and env vars (CLAW_SESSION, CLAW_SKILLS) to requires
● 无害
安装命令 点击复制
官方npx clawhub@latest install autonomous-loops
镜像加速npx clawhub@latest install autonomous-loops --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制