Security checks across malware telemetry and agentic risk
This skill is an autonomous coding workflow, but it also sets up background monitoring and outbound notifications with more authority than users may expect.
Review this carefully before installing. Use it only in a disposable or well-controlled development workspace, with no secrets in project files or prompts, and only if you explicitly want automatic file writes, model submission of code context, status persistence, and scheduled monitoring. After use, check and remove any OpenClaw cron jobs and .auto-coding state/log files you do not want retained.
)
# 安全透明：记录 cron 创建操作
print(f" 📡 子进程调用：openclaw cron add --name {cron_name} --every 5m")
subprocess.run([
"openclaw", "cron", "add",
"--name", cron_name,
"--every", "5m",# 安全透明：记录子进程调用
print(f" 📡 子进程调用：openclaw infer model run --model {model} --prompt ({len(prompt)} chars)")
result = subprocess.run(
[
"openclaw", "infer", "model", "run",
"--model", model,# eval 不安全 → 用受限命名空间、已知语法子集缓解
# 所有外部输入已被替换为 repr() 安全字面量
try:
result = eval(expr, {"__builtins__": {}}, {})
return bool(result)
except Exception:
return Falsetry:
import subprocess
result = subprocess.run(cmd, capture_output=True, text=True, check=True)
print(f"\n✅ Cron 监控已创建: {cron_name}")
print(f" 每 5 分钟检查一次")
print(f" 命令: openclaw cron show {cron_name}"))
# 安全透明：记录 cron 创建操作
print(f" 📡 子进程调用：openclaw cron add --name {cron_name} --every 5m")
subprocess.run([
"openclaw", "cron", "add",
"--name", cron_name,
"--every", "5m",DEFAULT_RULES = RuleSet(
auto_approve_edit=["src/*", "test/*", "tests/*", "docs/*", "*.md", "*.html", "*.css", "*.js", "*.py", "*.json"],
auto_approve_run=["npm test", "npm run test", "pytest", "python -m pytest", "npm run build"],
auto_approve_create=["src/*", "test/*", "docs/*"],
require_approval_edit=["config/*", ".env*", "*.config.js", "*.config.ts", ".github/*"],# 再检查是否自动通过
for path in file_paths:
matched = False
for pattern in rules.auto_approve_edit:
if fnmatch.fnmatch(path, pattern):
matched = True
break65/65 vendors flagged this skill as clean.