other
Warning
- Location
scripts/test-update-pipeline.sh:195- Finding
Bundled Maintenance Script Exceeds the Advertised Read-Only Skill Scope
- Content
View full analysis
"$TRAP_FILE" if git check-ignore -q "$TRAP_FILE" 2>/dev/null; then pass ".gitignore blocks .env files" else fail ".gitignore does not block .env files" fi rm -f "$TRAP_FILE" # Test .gitignore blocks swap files SWAP_FILE="$SKILL_DIR/SKILL.md.swp" touch "$SWAP_FILE" if git check-ignore -q "$SWAP_FILE" 2>/dev/null; then pass ".gitignore blocks .swp files" else warn ".gitignore does not block .swp files" fi rm -f "$SWAP_FILE" ``` ```bash cd "$OPENCLAW_DIR" git fetch upstream --quiet 2>/dev/null || true LOCAL_SHA=$(git rev-parse main:CHANGELOG.md 2>/dev/null || echo none) UPSTREAM_SHA=$(git rev-parse upstream/main:CHANGELOG.md 2>/dev/null || echo none) # ... cd "$SKILL_DIR" LOCAL_SHA=$(git rev-parse --short HEAD 2>/dev/null || echo "none") REMOTE_SHA=$(git ls-remote origin HEAD 2>/dev/null | cut -c1-7 || echo "none") ``` ```bash JOBS_FILE="$HOME/.openclaw/cron/jobs.json" if [ -f "$JOBS_FILE" ]; then JOB_MSG=$(python3 -c " import json jobs=json.load(open('$JOBS_FILE'))['jobs'] j=[x for x in jobs if x['id']=='492d067a-5cb1-47c5-92bc-fd8985c64a1f'] if j: print(j[0]['payload']['message']) else: print('NOT_FOUND') " 2>/dev/null || echo "PARSE_ERROR") if [ "$JOB_MSG" = "NOT_FOUND" ]; then fail "Cron job 492d067a not found in jobs.json" elif [ "$JOB_MSG" = "PARSE_ERROR" ]; then fail "Could not parse jobs.json" else pass "Cron job 492d067a found" if echo "$JOB_MSG" | grep -q "git push"; then fail "Cron still has git push — should be removed (manual sy ...[truncated 4510 chars]- Remediation
View remediation