Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Conversation Flow Monitor

Monitors and prevents conversation flow issues by implementing robust error handling, timeouts, and recovery mechanisms for reliable agent interactions.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 25 · 0 current installs · 0 all-time installs
byEron@edkuo7
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description align with included Python scripts (monitor, error handler, examples). The code implements timeouts, retries, and logging as claimed. Minor mismatch: documentation references OpenClaw workspace paths (e.g., ~/.openclaw/workspace/.logs) while many scripts and examples use ~/.copaw/.logs and other home-directory paths — inconsistent naming may lead to surprising file locations. Overall capabilities are coherent with the stated purpose, but the path/name inconsistencies should be resolved.
!
Instruction Scope
SKILL.md and examples direct the skill to read and write workspace artifacts (.learnings/ERRORS.md, AGENTS.md, TOOLS.md, SOUL.md, ~/.copaw/.logs, etc.) and to validate other skills' SKILL.md files. That means the skill can inspect and modify other workspace files (potentially other skills' meta files). While this is within a 'self-improving' monitoring remit, it is scope-creep relative to a simple timeout/error wrapper and could unintentionally alter other skills or workspace config; the user should confirm intended file targets and permissions.
Install Mechanism
No install spec (instruction-only) and code files are included directly. No remote downloads, no package installs declared. This reduces supply-chain risk — nothing is fetched from external URLs during install.
Credentials
No environment variables, credentials, or external service tokens are requested. The skill operates using local filesystem and Python standard library only, which is proportional to a local monitoring tool.
!
Persistence & Privilege
always:false (good), but the skill is designed to autonomously log, promote patterns to 'permanent memory', and update AGENTS.md/TOOLS.md/SOUL.md in the workspace. That means it will persist changes into the user's workspace and potentially modify cross-skill documentation. Combined with autonomous invocation, this increases blast radius if behavior is unexpected; users should review and control where it writes and whether auto-promotions are enabled.
What to consider before installing
This skill appears to implement what it claims, but review and precautions are recommended before enabling broadly: - Inspect and test locally first: run the included examples in a sandboxed environment to verify where files are written (search for ~/.copaw, ~/.openclaw, .learnings, AGENTS.md, SOUL.md, TOOLS.md). Back up those files if they exist. - Confirm file-write targets and permissions: the skill intentionally writes/updates workspace docs and logs; if you don't want automatic modifications, disable or edit the code paths that promote patterns or update AGENTS.md/SOUL.md. - Audit code paths that execute shell commands (subprocess.run) and the safe tool wrappers: they can execute local commands; ensure examples and wrappers are used safely and do not run untrusted input. - Verify network behavior in your environment: although the package declares no external network calls, wrappers are designed to monitor tools that may perform network I/O (e.g., browser automation); confirm whether you want the monitor to wrap networked tools. - Fix naming/path inconsistencies: the repository mixes 'openclaw' and 'copaw' paths; decide and standardize the workspace path to avoid misplaced logs or accidental reads/writes of unrelated files. If you want to proceed: run the skill with limited permissions and with auto-promotion/logging disabled until you confirm it only modifies intended files. If you are unsure, request the author clarify (1) exact file write locations, (2) auto-promotion behavior, and (3) whether any external network interactions will be initiated by the shipped code.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk9769vnmbzxz1gbqjezmdap0cd830nbc

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Conversation Flow Monitor

Prevents conversations from getting stuck by implementing comprehensive error handling, timeout management, and recovery strategies.

Problem Statement

Conversations frequently get stuck due to:

  • Skill registration failures (missing YAML front matter)
  • Browser automation hanging without proper timeouts
  • File operations on non-existent paths
  • Network operations that timeout or fail silently
  • Cascading failures in multi-step workflows

Solution Overview

This skill provides:

  1. Proactive Validation: Validates skill files and system state before execution
  2. Robust Error Handling: Implements proper try-catch patterns with fallbacks
  3. Timeout Management: Enforces reasonable timeouts on all operations
  4. Recovery Mechanisms: Provides graceful degradation when primary approaches fail
  5. Monitoring & Logging: Tracks conversation health and logs potential issues

Key Features

1. Skill Validation Helper

Automatically validates SKILL.md files have proper YAML front matter before installation.

2. Safe Tool Execution Wrapper

Wraps all tool calls with timeout protection and error recovery.

3. Conversation Health Monitoring

Monitors conversation flow and detects potential stuck states.

4. Recovery Strategies

Provides alternative approaches when primary methods fail.

5. Diagnostic Logging

Logs detailed diagnostics for troubleshooting conversation issues.

Usage Patterns

Before Complex Operations

# Validate environment before starting complex workflows
validate_skill_files()
check_system_dependencies()

Safe Tool Execution

# Instead of direct tool calls
result = safe_execute_tool(
    tool_name="browser_use",
    params={"action": "open", "url": "https://example.com"},
    timeout=30,
    retries=2
)

Conversation Health Check

# Periodic health check during long conversations
if conversation_health_check():
    continue_normal_operation()
else:
    initiate_recovery_protocol()

Integration Points

With self-improving-agent

  • Logs conversation flow issues to .learnings/ERRORS.md
  • Promotes successful recovery patterns to permanent memory
  • Tracks recurring conversation failure patterns

With OpenClaw Workspace

  • Integrates with existing AGENTS.md guidelines
  • Updates SOUL.md with behavioral improvements
  • Enhances TOOLS.md with tool-specific reliability notes

Installation

This skill is automatically available when installed in the active_skills directory.

Best Practices

  1. Always validate first: Check skill files and system state before execution
  2. Use reasonable timeouts: Never let operations run indefinitely
  3. Implement fallbacks: Always have alternative approaches ready
  4. Log everything: Detailed logging helps identify root causes
  5. Monitor proactively: Don't wait for failures to implement monitoring

Error Categories Handled

Error TypeDetection MethodRecovery Strategy
Skill RegistrationYAML front matter validationAuto-fix missing fields
Browser HangTimeout monitoringSwitch to alternative browser method
File Not FoundPre-operation path validationCreate missing directories/files
Network TimeoutConnection timeout enforcementRetry with exponential backoff
Memory IssuesResource usage monitoringCleanup and restart lightweight operations

Performance Impact

  • Minimal overhead (<5% performance impact)
  • Only activates during potentially problematic operations
  • Configurable sensitivity levels

Future Enhancements

  • Machine learning-based anomaly detection
  • Predictive failure prevention
  • Automated root cause analysis
  • Cross-session conversation pattern learning

Files

24 total
Select a file
Select a file to preview.

Comments

Loading comments…