Test-Driven Revolution

This skill implements an automated pipeline that accepts model-generated instructions and runs them as shell commands in your workspace. Before installing or scheduling its heartbeats: - Do NOT run these scripts on a machine with sensitive data or credentials. Use an isolated VM or container. - Inspect security-scan.js and confirm it reliably blocks dangerous patterns you care about (it is referenced but enforcement appears partial). - Replace or enforce a real sandbox (Docker, nsjail, or other containerization) for executeInSandbox instead of the current execSync-based execution. The code has comments recommending sandboxing but does not enforce it. - Avoid automatically scheduling cron jobs until you trust the code; run tasks manually first and watch logs/events.log. - Review how review.next_instructions is produced and validated: model outputs can include network exfiltration, credential-stealing commands, or destructive operations. Ensure review outputs are human-reviewed or strictly validated before execution. - If you want to proceed, run the skill in a tightly restricted environment, audit logs regularly, and do not grant the host any secrets or cloud credentials accessible from the skill's workspace. Given the mismatch between claimed safety controls (sandboxing, scans) and the current implementation (direct execSync), treat this skill as high-risk until you harden execution and verification paths.

These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.