agents-refresh
v1.1.1Automatically reload AGENTS.md regularly to maintain fresh context, prevent session drift, and keep memory and tasks updated.
⭐ 0· 335·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (reload AGENTS/IDENTITY/SOUL and distill MEMORY.md) align with the manifest permissions and SKILL.md: reads AGENTS.md, SOUL.md, IDENTITY.md, USER.md and memory/*.md and writes MEMORY.md/HEARTBEAT.md. There are no unrelated env vars, binaries, or installs requested.
Instruction Scope
SKILL.md instructs only to read/update the workspace markdown files, add a cron job, and distill logs into four categories. It does not direct the agent to read unrelated system paths, environment variables, or transmit data to external endpoints beyond the platform 'cron' announce delivery described in the payload.
Install Mechanism
No install spec and no code files — instruction-only (.md) distribution — so nothing is downloaded or written to disk by an installer. This is the lowest install risk.
Credentials
The skill requests no environment variables or external credentials. The manifest's file-read/write permissions correspond to the stated memory/distillation function; no unrelated secrets or keys are requested.
Persistence & Privilege
always is false and model invocation is allowed (platform default). The skill does not request permanent platform-wide privileges or modification of other skills' configs. It suggests adding a cron job within the platform, which is consistent with its purpose.
Assessment
This skill appears coherent and low-risk: it only reads and summarizes agent markdown files and adds a platform cron job. Before installing, review the contents of AGENTS.md, IDENTITY.md, SOUL.md, USER.md and any memory/*.md for sensitive data you do not want automatically re-read or summarized (these files may store secrets or PII). Test the workflow manually first (run the refresh task by hand) to confirm the outputs and that the cron payload's "announce" behavior is acceptable. If you need stricter limits, remove sensitive files from the declared read set or avoid enabling the cron job.Like a lobster shell, security has layers — review code before you run it.
latestvk9701bv4fed4ntg5gthwwttm4x8235y7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.