Project Heartbeat
v0.4.1Design controlled continuation loops for long-running projects. Use when a task is too large for one session, benefits from periodic wake-ups, and needs expl...
⭐ 0· 136·0 current·0 all-time
bywuu Dao@daowuu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the included artifacts and scripts. The two Python scripts and SKILL.md operate on project-local files (STATE.md, TODO.md, HEARTBEAT-LOG.md, PENDING-DECISIONS.md) which are directly relevant to a 'project heartbeat' capability.
Instruction Scope
Instructions focus on designing cadence, continuation rules, and writing durable artifacts in the project tree. The SKILL.md contains an advisory about announce-mode cron delivery (Telegram) and mentions config keys, but it does not instruct accessing system-wide secrets or remotely exfiltrating data. This is an optional integration note rather than a hard requirement.
Install Mechanism
No install spec; instruction-only with two small helper scripts. Nothing is downloaded or written to system paths by an installer.
Credentials
The skill declares no required env vars or credentials. The only external-integration reference (Telegram announce delivery) is optional and not required for core functionality; the skill does not request tokens or other secrets.
Persistence & Privilege
always is false and the skill does not request persistent/privileged presence, nor does it modify other skills or system-wide configs. Autonomous invocation is allowed (platform default) and appropriate for the skill's purpose.
Assessment
This skill appears coherent and low-risk: review the two included Python scripts (they only read local project files and print guidance) and ensure you run them against the intended project directory. Note the SKILL.md mentions optional announce delivery via Telegram — if you enable that feature you'll need to configure a Telegram channel/token elsewhere; the skill does not request those credentials itself. Pick reasonable cadence values (30s is aggressive for many projects) and ensure HEARTBEAT-LOG.md / STATE.md / TODO.md are not placed in directories with sensitive or private data you don't want automated agents touching.Like a lobster shell, security has layers — review code before you run it.
latestvk97by120vb93zd8zqgz0ddjz6s83jznh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
